Description
Microsoft Exchange Server 信息泄露漏洞(CVE-2021-33766)
Microsoft Exchange Server 信息泄露漏洞(CVE-2021-33766)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2021-33766
https://www.cve.org/CVERecord?id=CVE-2021-33766
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-33766
https://www.zerodayinitiative.com/advisories/ZDI-21-798/
https://www.sentinelone.com/vulnerability-database/cve-2021-33766/
https://arcticwolf.com/resources/blog/proxytoken-authentication-bypass-vulnerability-in-on-premises-microsoft-exchange/
https://github.com/bhdresh/CVE-2021-33766
https://avd.aliyun.com/detail?id=AVD-2021-33766
https://www.thezdi.com/blog/2021/8/30/proxytoken-an-authentication-bypass-in-microsoft-exchange-server
https://thehackernews.com/2021/08/new-microsoft-exchange-proxytoken-flaw.html
https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-2016-and-2013-april-13-2021-kb5001779-8e08f3b3-fc7b-466c-bbb7-5d5aa16ef064
https://cn-sec.com/archives/495669.html
https://www.4hou.com/posts/E1Nl