CVE-2021-1730: Microsoft Exchange Server Spoofing Vulnerability
<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p> <p>This update addresses this vulnerability.</p> <p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.</p>
Other sources
A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.
— Microsoft
Microsoft Exchange Server Spoofing Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-1730?
CVE-2021-1730 is a Microsoft Exchange Server Spoofing Vulnerability.
What is the severity of CVE-2021-1730?
CVE-2021-1730 has a severity level of high (5.4).
What software is affected by CVE-2021-1730?
Microsoft Exchange Server 2016 CU18 and Exchange Server 2019 CU7 are affected by CVE-2021-1730.
How can I fix CVE-2021-1730?
Apply the relevant patches provided by Microsoft for Exchange Server 2016 CU18 and Exchange Server 2019 CU7.
Where can I find more information about CVE-2021-1730?
You can find more information about CVE-2021-1730 on the Microsoft Security Response Center's advisory page and the Microsoft Update Guide.