CVE-2021-31207MediumCVSS 6.6
Microsoft Exchange Server Security Feature Bypass Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Was this vulnerability found in the 2021 Pwn2Own contest? Yes, this was one of the Exchange Server vulnerabilities found in the 2021 Pwn2Own contest.
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.
🎯 Affected products5
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
- Microsoft Exchange Server 2016 Cumulative Update 20
- Microsoft Exchange Server 2019 Cumulative Update 8
- Microsoft Exchange Server 2019 Cumulative Update 9
✅ Remediation
KB5003435 (Security Update) — fixed build 15.00.1497.018 KB5003435 (Security Update) — fixed build 15.02.0858.012 KB5003435 (Security Update) — fixed build 15.01.2242.010 KB5003435 (Security Update) — fixed build 15.01.2176.014 KB5003435 (Security Update) — fixed build 15.02.0792.015
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31207
- patchhttp://www.microsoft.com/download/details.aspx?familyid=91b8d31b-dcd8-4e3c-a262-8229a0d060d4
- referencehttps://support.microsoft.com/help/5003435
- patchhttp://www.microsoft.com/download/details.aspx?familyid=9536f4a0-838b-40a6-b625-36cd7a6229a1
- patchhttp://www.microsoft.com/download/details.aspx?familyid=e8857a66-5eb5-4b0e-b938-07eb17c3af1a
- patchhttp://www.microsoft.com/download/details.aspx?familyid=68b339e9-3040-4da8-8e57-6fd325cfa9ee
- patchhttp://www.microsoft.com/download/details.aspx?familyid=0ff8a768-1dfb-4d50-acd4-87f5a1b34e5f