Forum Discussion
Tenable Research Update On ProxyNotShell (CVE-2022-41040,...
Tenable Research Update On ProxyNotShell (CVE-2022-41040, CVE-2022-41082) Update 10/6: A new plugin has been released. Read below for more details. As new information and research into the two zero...
Hi,
We are facing the same issue as Dean Rhoades
We have implemented the following recommended mitigation, but the plugins still find our servers as vulnerable (https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/).
The plugin only identify the exchange servers or also test vulnerability?
how can i know if this is remediated ?
Thanks!
Hi Martin,
I've confirmed with the plugins team that Plugin ID 165705 will flag Exchange servers based on the version information reported. The plugin does not check systems for the presence of Microsoft's suggested mitigations.
