Demonstrating CVE-2020-0688: A Remote Code Execution Bug in Microsoft Exchange

Опубликовано: 25 Февраль 2020
на канале: Trend Zero Day Initiative
50,053
224

This video demonstrates how an authenticated user could remotely take over an affected Microsoft Exchange Server. The vulnerability results from Exchange Server failing to properly create unique cryptographic keys at the time of installation. Microsoft patched this in February 2020 and assigned it CVE-2020-0688.