CVE-2021-33766 - Microsoft Exchange Server Information Disclosure
Project:Microsoft
Product:Exchange Server
Date Added:2022-01-18Due Date:2022-02-01
Vulnerability Name
Microsoft Exchange Server Information Disclosure
Description
Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply updates per vendor instructions.
Additional Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-33766