CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-11-14
Microsoft Exchange Server Elevation of Privilege and NTLM Relay Vulnerability (CVE-2018-8581) Analysis & Mitigation Guide
[Affected Scope] Microsoft Exchange Server 2010, 2013, 2016, and 2019
[Impact] An attacker can elevate privileges to SYSTEM/Exchange Windows Permissions, leading to a complete compromise of the Active Directory domain controller
[Mitigation] Remove the 'DisableLoopbackCheck' registry key, apply the latest Exchange Cumulative Updates, and enable Extended Protection for Authentication (EPA) on EWS