CVE-2017-11761: Infoleak

Published Sep 13, 2017

Updated

Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exchange that could potentially result in unintended Information Disclosure, aka "Microsoft Exchange Information Disclosure Vulnerability"

Affected Software

5 affected components

Microsoft Exchange Server=2013-cumulative_update_16

Microsoft Exchange Server=2013-cumulative_update_17

Microsoft Exchange Server=2013-sp1

Microsoft Exchange Server=2016-cumulative_update_5

Microsoft Exchange Server=2016-cumulative_update_6

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11761

Event History

Sep 13, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11761?

CVE-2017-11761 is considered a medium severity vulnerability due to its potential for information disclosure.

How do I fix CVE-2017-11761?

To fix CVE-2017-11761, upgrade your Microsoft Exchange Server to the latest cumulative update or security patch provided by Microsoft.

Which Microsoft Exchange versions are affected by CVE-2017-11761?

CVE-2017-11761 affects Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016, specifically certain cumulative updates and service packs.

What type of issue is CVE-2017-11761?

CVE-2017-11761 is an input sanitization issue that could lead to unintended information disclosure.

Is there a workaround for CVE-2017-11761?

There are no official workarounds for CVE-2017-11761, and applying the appropriate security updates is the recommended action.