Rapid7 Vulnerability & Exploit Database

Microsoft CVE-2019-1266: Microsoft Exchange Spoofing Vulnerability

Back to Search

Microsoft CVE-2019-1266: Microsoft Exchange Spoofing Vulnerability

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
09/10/2019
Created
09/11/2019
Added
09/10/2019
Modified
09/20/2019

Description

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App (OWA) fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive information. An attacker could also redirect the user to a malicious website that could spoof content or the vulnerability could be used as a pivot to chain an attack with other vulnerabilities in web services. To exploit the vulnerability, an attacker could send a specially crafted email containing a malicious link to a user. An attacker could also use a chat client to social engineer a user into clicking the malicious link. However, in both examples the user must click the malicious link. The security update addresses the vulnerability by correcting how OWA validates web requests.

Solution(s)

  • msft-kb4515832-17c68742-4fef-4153-a2e1-dfc05613eafd
  • msft-kb4515832-6389c181-907c-41d8-ad2e-95e60c22bffd
  • msft-kb4515832-7e168250-02fe-4df4-b3f6-84c0a0c2d96f
  • msft-kb4515832-c7e2d61f-c9a7-4bd5-b861-da07ae5a05a6

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;