Description
Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 | Microsoft / Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 30 | unspecified | affected |
| Microsoft Exchange Server 2013 | Microsoft / Microsoft Exchange Server 2013 | Cumulative Update 23 | affected |
| Microsoft Exchange Server 2016 Cumulative Update 14 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 14 | unspecified | affected |
| Microsoft Exchange Server 2016 Cumulative Update 15 | Microsoft / Microsoft Exchange Server 2016 Cumulative Update 15 | unspecified | affected |
| Microsoft Exchange Server 2019 Cumulative Update 3 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 3 | unspecified | affected |
| Microsoft Exchange Server 2019 Cumulative Update 4 | Microsoft / Microsoft Exchange Server 2019 Cumulative Update 4 | unspecified | affected |