What is CVE-2020-17143?

CVE-2020-17143 is a vulnerability in Microsoft Exchange Server that allows attackers to disclose sensitive information.

What is the severity of CVE-2020-17143?

The severity of CVE-2020-17143 is high with a CVSS score of 8.8.

Which versions of Microsoft Exchange Server are affected by CVE-2020-17143?

Microsoft Exchange Server 2013 (Cumulative Update 23), Exchange Server 2016 (Cumulative Update 17 and 18), and Exchange Server 2019 (Cumulative Update 6 and 7) are affected by CVE-2020-17143.

How can attackers exploit CVE-2020-17143?

Attackers can exploit CVE-2020-17143 by sending specially crafted requests to a vulnerable Microsoft Exchange server and gaining access to sensitive information.

Is there a fix available for CVE-2020-17143?

Yes, Microsoft has released security updates to address the vulnerability. It is recommended to apply the latest cumulative updates for the affected versions of Microsoft Exchange Server.

Vulnerability/
CVE-2020-17143

high

8.8

9/12/2020

4/8/2024

CVE-2020-17143: Microsoft Exchange Server Information Disclosure Vulnerability

First published: Wed Dec 09 2020(Updated: )

Microsoft Exchange Information Disclosure Vulnerability

Credit: secure@microsoft.com secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Exchange Server	=2013-cumulative_update_23
Microsoft Exchange Server	=2016-cumulative_update_17
Microsoft Exchange Server	=2016-cumulative_update_18
Microsoft Exchange Server	=2019-cumulative_update_6
Microsoft Exchange Server	=2019-cumulative_update_7

Remedy

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17143

Never miss a vulnerability like this again

Reference Links

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17143

Frequently Asked Questions

What is CVE-2020-17143?
CVE-2020-17143 is a vulnerability in Microsoft Exchange Server that allows attackers to disclose sensitive information.
What is the severity of CVE-2020-17143?
The severity of CVE-2020-17143 is high with a CVSS score of 8.8.
Which versions of Microsoft Exchange Server are affected by CVE-2020-17143?
Microsoft Exchange Server 2013 (Cumulative Update 23), Exchange Server 2016 (Cumulative Update 17 and 18), and Exchange Server 2019 (Cumulative Update 6 and 7) are affected by CVE-2020-17143.
How can attackers exploit CVE-2020-17143?
Attackers can exploit CVE-2020-17143 by sending specially crafted requests to a vulnerable Microsoft Exchange server and gaining access to sensitive information.
Is there a fix available for CVE-2020-17143?
Yes, Microsoft has released security updates to address the vulnerability. It is recommended to apply the latest cumulative updates for the affected versions of Microsoft Exchange Server.

agent/author
agent/type
agent/description
agent/references
agent/title
agent/remedy
agent/severity
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-index
agent/tags
collector/mitre-cve
source/MITRE
vendor/microsoft
canonical/microsoft exchange server
version/microsoft exchange server/2013-cumulative_update_23
version/microsoft exchange server/2016-cumulative_update_17
version/microsoft exchange server/2016-cumulative_update_18
version/microsoft exchange server/2019-cumulative_update_6
version/microsoft exchange server/2019-cumulative_update_7

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.