/claim #14576

Added CVE-2018-8581 YAML template for Microsoft Exchange Server Elevation of Privilege vulnerability.

PR Information

This template detects the CVE-2018-8581 vulnerability which allows NTLM Relay attacks via the EWS PushSubscription feature.

• Added CVE-2018-8581

References:

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581
• https://www.thezdi.com/blog/2018/12/19/an-insincere-form-of-flattery-impersonating-users-on-microsoft-exchange

Template validation

[x] Validated with a host running a vulnerable version and/or configuration (True Positive)