Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2018-8581

Andres Bohren

2018-11-21

Hallo zusammen,

Microsoft hat eine Elevation of Privilege Vulnerability in Exchange 2010 , Exchange 2013, Exchange 2016, Exchange 2019 gemeldet.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581

Das Problem kann man beheben in dem man den folgenden Registry Key löscht.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\DisableLoopbackCheck

Das geht mit folgendem Befehl im cmd:

reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck /f

Danach muss der Server neu gestartet werden.

Grüsse

Andres Bohren

Andres works as a Senior Microsoft Cloud Engineer/Architect for midsize to large Enterprises at isolutions in Switzerland. He has a special focus on M365 including Identity, Messaging, Communication, Security and PowerShell but also some Azure Technologies. He is Co-Organisator of the Microsoft 365 Community Schweiz Meetup group and was Speaker at several other Meetups or Conferences. He likes good Food, his Bike and nice Dive spots all over the World.