Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2018-8581

Andres Bohren

2018-11-21

Hallo zusammen,

Microsoft hat eine Elevation of Privilege Vulnerability in Exchange 2010 , Exchange 2013, Exchange 2016, Exchange 2019 gemeldet.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581

Das Problem kann man beheben in dem man den folgenden Registry Key löscht.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\DisableLoopbackCheck

Das geht mit folgendem Befehl im cmd:

reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck /f

Danach muss der Server neu gestartet werden.

Grüsse

Andres Bohren

Works as a Microsoft Cloud Engineer/Architect for midsize to large Enterprises. He has a special focus on M365 including Identity, Messaging, Communication, Security and PowerShell but also Azure Technologies. He is Co-Organisator of the <Microsoft 365 Community Schweiz> Meetup group and was Speaker at several other Meetups.