Forum Discussion

scaveza's avatar
scaveza
Product Team
3 years ago

Tenable Research Update On ProxyNotShell (CVE-2022-41040,...

Tenable Research Update On ProxyNotShell (CVE-2022-41040, CVE-2022-41082) Update 10/6: A new plugin has been released. Read below for more details. As new information and research into the two zero...
Cyber Exposure Alerts
luke_barlow's avatar
luke_barlow
3 years ago

I'm also finding the same results that Martin Caracciolo and Dean Rhoades are experiencing. We have performed what Microsoft has informed on what to do, but it's still showing as discovered and vulnerable.

What is the check this plugin is looking at, so I can work through our mitigation and fix any vulnerabilities present.

Thanks!

  • scaveza's avatar
    scaveza
    Product Team
    3 years ago

    Hi Luke,

    I've confirmed with the plugins team that Plugin ID 165705 will flag Exchange servers based on the version information reported. The plugin does not check systems for the presence of Microsoft's suggested mitigations.

    • luke_barlow's avatar
      luke_barlow
      3 years ago

      Hey Scott,

      Thanks for the information.

Recent Discussions