CVE-2015-1631: Medium severity microsoft exchange server vulnerability

Published Mar 11, 2015

Updated

Microsoft Exchange Server 2013 SP1 and Cumulative Update 7 allows remote attackers to spoof meeting organizers via unspecified vectors, aka "Exchange Forged Meeting Request Spoofing Vulnerability."

Affected Software

2 affected components

Microsoft Exchange Server=2013-cumulative_update_7

Microsoft Exchange Server=2013-sp1

Event History

Mar 11, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1631?

CVE-2015-1631 has a critical severity rating due to its potential to allow remote attackers to spoof meeting organizers.

How do I fix CVE-2015-1631?

To fix CVE-2015-1631, apply the latest Microsoft Exchange Server updates, including the patches provided in Cumulative Update 8 or later.

Who is affected by CVE-2015-1631?

CVE-2015-1631 affects users of Microsoft Exchange Server 2013 SP1 and Cumulative Update 7.

What types of attacks are possible with CVE-2015-1631?

CVE-2015-1631 allows attackers to spoof meeting requests, potentially misleading users about the legitimacy of incoming meeting invitations.

Is there a workaround for CVE-2015-1631?

There are no known workarounds for CVE-2015-1631, so applying the necessary updates is the recommended action.