It’s known that attackers always keep trying new ways to exploit the vulnerabilities. Well, the Proxy Logon Microsoft Exchange vulnerability is again in the news. Latest News On Proxy Logon Microsoft Exchange Vulnerabilities: This vulnerability requires either exploiting the CVE-2021-26855 SSRF vulnerability or compromising a legitimate admin’s credentials. This requires administrator privileges or another vulnerability CVE-2021-26858 to exploit.ĬVE-2021-26858 & CVE-2021-27065: This is a Post authentication, and arbitrary file writes vulnerabilities allow an attacker to write a script on any location on the exchange server. procedure To Detect The Microsoft Exchange 0 Day Exploitįour Vulnerabilities Used To Exploit The Microsoft Exchange Servers:Īccording to Microsoft, Threat Actors used these four vulnerabilities to create backdoor on Exchange servers for data exfiltration.ĬVE-2021-26855: This is a server-side request forgery (SSRF) vulnerability in Exchange, Which allows arbitrary HTTP request sent and authenticate as a server.ĬVE-2021-26857: This is an insecure deserialization vulnerability In a united messaging service that allow the attacker to run the code on the Exchange Server.Latest News On Proxy Logon Microsoft Exchange Vulnerabilities:.Four Vulnerabilities Used To Exploit The Microsoft Exchange Servers:.

Microsoft safety scanner exchange