Forum Discussion
Tenable Research Update On ProxyNotShell (CVE-2022-41040,...
Tenable Research Update On ProxyNotShell (CVE-2022-41040, CVE-2022-41082) Update 10/6: A new plugin has been released. Read below for more details. As new information and research into the two zero...
Our Exchange severs utilise the Exchange Emergency Mitigation Service, so have already had a fix as per the blog post mentioned here: https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/
Having run Nessus scans over the weekend, it is reporting that our servers are still vulnerable to CVE-2022-41040, CVE-2022-41082.
Is this correct based on us having the fixes in place as per Microsoft's article?
Hi Dean,
I've confirmed with the plugins team that Plugin ID 165705 will flag Exchange servers based on the version information reported. The plugin does not check systems for the presence of Microsoft's suggested mitigations.
