Vulnerability CVE-2022-41040

Vulnerability Name:

CVE-2022-41040 (CCN-237564)

Assigned:

2022-09-29

Published:

2022-09-29

Updated:

2023-03-02

Summary:

Microsoft Exchange Server is vulnerable to server-side request forgery, caused by improper validation of user-supplied input within the Exchange OWA interface. By sending a specially-crafted request, a remote authenticated attacker could exploit this vulnerability to conduct an SSRF attack.

CVSS v3 Severity:

8.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
7.7 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): Low User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): High Availibility (A): None

CVSS v2 Severity:

6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:N/I:C/A:N)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): None Integrity (I): Complete Availibility (A): None

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2022-41040

Source: secure@microsoft.com
Type: Exploit, Third Party Advisory, VDB Entry
secure@microsoft.com

Source: CCN
Type: US-CERT VU#915563
Microsoft Exchange 2019 Cumulative Update 23 and earlier versions are vulnerable to a server-side request forgery (SSRF) attack and remote code execution. An authenticated attacker can use the combination of these two vulnerabilities to elevate privileges and execute arbitrary code on the target Exchange server.

Source: XF
Type: UNKNOWN
ms-exchange-cve202241040-ssrf(237564)

Source: CCN
Type: Microsoft Security Response Center
Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server

Source: secure@microsoft.com
Type: Mitigation, Patch, Vendor Advisory
secure@microsoft.com

Source: secure@microsoft.com
Type: Third Party Advisory, US Government Resource
secure@microsoft.com

Source: secure@microsoft.com
Type: UNKNOWN
secure@microsoft.com

Vulnerable Configuration:

Configuration CCN 1:

cpe:/a:microsoft:exchange_server:2013:-:*:*:*:*:*:*

OR cpe:/a:microsoft:exchange_server:2016:-:*:*:*:*:*:*

OR cpe:/a:microsoft:exchange_server:2019:-:*:*:*:*:*:*

Denotes that component is vulnerable

BACK