CVE-2021-33766
HIGH KEV NUCLEIMicrosoft Exchange Server - Info Disclosure
Title source: llmExploitation Summary
CVE-2021-33766 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 18, 2022. EIP tracks 3 public exploits from researchers including bhdresh, demossl. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional bash script that exploits CVE-2021-33766 (ProxyToken), an authentication bypass vulnerability in Microsoft Exchange Server. The script can check for vulnerability and create malicious inbox rules by leveraging the SecurityToken cookie manipulation.
Description
Microsoft Exchange Server Information Disclosure Vulnerability
Exploits (3)
This repository contains a functional bash script that exploits CVE-2021-33766 (ProxyToken), an authentication bypass vulnerability in Microsoft Exchange Server. The script can check for vulnerability and create malicious inbox rules by leveraging the SecurityToken cookie manipulation.
This repository contains a functional exploit for CVE-2021-33766 (ProxyToken), an authentication bypass vulnerability in Microsoft Exchange Server. The script checks for the vulnerability and can modify email forwarding rules by exploiting the flaw.
The repository contains a functional bash script that exploits CVE-2021-33766 (ProxyToken), an authentication bypass vulnerability in Microsoft Exchange Server. The script can check for vulnerability and create malicious inbox rules by leveraging a crafted SecurityToken cookie.
Nuclei Templates (1)
vuln:cve-2021-26855 || http.favicon.hash:1768726119 || http.title:"outlook" || cpe:"cpe:2.3:a:microsoft:exchange_server"
title="outlook" || icon_hash=1768726119
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L