Rollup 18 for Microsoft Exchange Server Server Side Request Forgery Security Bypass Vulnerability

Bugtraq ID:	105386
Class:	Input Validation Error
CVE:	CVE-2018-16793
Remote:	Yes
Local:	No
Published:	Sep 17 2018 12:00AM
Updated:	Sep 17 2018 12:00AM
Credit:	Alphan Yavas
Vulnerable:	Microsoft Rollup 18 for Microsoft Exchange Server 2010 SP3
Not Vulnerable:

Rollup 18 for Microsoft Exchange Server Server Side Request Forgery Security Bypass Vulnerability

Rollup 18 for Microsoft Exchange Server is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.

Rollup 18 for Microsoft Exchange Server 2010 SP3 and prior versions are vulnerable.

Rollup 18 for Microsoft Exchange Server Server Side Request Forgery Security Bypass Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Rollup 18 for Microsoft Exchange Server Server Side Request Forgery Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Rollup 18 for Microsoft Exchange Server Server Side Request Forgery Security Bypass Vulnerability

References:

• Disclose SSRF Vulnerability (Alphan Yavas)
  
• Microsoft Homepage (Microsoft)