CVE-2018-8604: Medium severity microsoft exchange server vulnerability

Published Dec 12, 2018

Updated

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability." This affects Microsoft Exchange Server.

Affected Software

2 affected components

Microsoft Exchange Server=2016-cumulative_update_10

Microsoft Exchange Server=2016-cumulative_update_11

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8604

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8604?

CVE-2018-8604 has been assigned a severity rating that reflects a potential risk to data integrity associated with Microsoft Exchange Server.

How do I fix CVE-2018-8604?

To fix CVE-2018-8604, apply the latest cumulative updates for affected versions of Microsoft Exchange Server.

Which versions of Microsoft Exchange Server are affected by CVE-2018-8604?

CVE-2018-8604 affects Microsoft Exchange Server 2016 Cumulative Update 10 and 11.

What impact does CVE-2018-8604 have on Microsoft Exchange Server?

CVE-2018-8604 allows for tampering with profile data, which can compromise the integrity of user information.

Is it necessary to patch for CVE-2018-8604 immediately?

Yes, it is advisable to patch for CVE-2018-8604 promptly to mitigate the risk of potential data tampering vulnerabilities.