My Pulsant
Threat Intelligence Alert: CVE-2023-23397 - Microsoft Outlook Elevation of Privilege Vulnerability
Subscribe
Update - Microsoft strongly recommend all customers apply the latest updates for Microsoft Outlook.
Please refer to https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397 for more information, FAQ's and additional mitigation details.
Users can check if they require updates by opening a Microsoft application (word/excel etc) and clicking, File > Account > Update Options > Update Now
Mar 15, 2023 - 14:30 GMT
Please refer to https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397 for more information, FAQ's and additional mitigation details.
Users can check if they require updates by opening a Microsoft application (word/excel etc) and clicking, File > Account > Update Options > Update Now
Mar 15, 2023 - 14:30 GMT
Identified - Summary
Microsoft has discovered limited, targeted abuse of a Microsoft Outlook vulnerability that allows for NTLM credential theft. The vulnerability can be exploited by sending a malicious email to a vulnerable version of Outlook, and Microsoft note that the exploitation can occur even before the message is viewed in the Preview Pane; so no user interaction is required.
For more detailed information, please refer to Microsoft's MSRC Blog post - https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/
Impact
All supported versions of Microsoft Outlook for Windows are affected. Microsoft Outlook on macOS, iOS, Android and Outlook on the web are not known to be affected at this time.
Resolution
Microsoft strongly recommend all customers apply the latest updates for Microsoft Outlook. Please refer to https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397 for more information, FAQ's and additional mitigation details.
Mar 15, 2023 - 10:23 GMT
Microsoft has discovered limited, targeted abuse of a Microsoft Outlook vulnerability that allows for NTLM credential theft. The vulnerability can be exploited by sending a malicious email to a vulnerable version of Outlook, and Microsoft note that the exploitation can occur even before the message is viewed in the Preview Pane; so no user interaction is required.
For more detailed information, please refer to Microsoft's MSRC Blog post - https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/
Impact
All supported versions of Microsoft Outlook for Windows are affected. Microsoft Outlook on macOS, iOS, Android and Outlook on the web are not known to be affected at this time.
Resolution
Microsoft strongly recommend all customers apply the latest updates for Microsoft Outlook. Please refer to https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397 for more information, FAQ's and additional mitigation details.
Mar 15, 2023 - 10:23 GMT
About This Site
We are the UK’s leading colocation and cloud infrastructure provider.
We provide colocation and cloud infrastructure services from our 10 regional data centres, including integration and management of public cloud, with a core focus on availability, security and connectivity.
Business Continuity
Operational
Cloud Backup (Asigra) Edinburgh
Operational
Cloud Backup (Asigra) Milton Keynes
Operational
Cloud Backup (Asigra) Newcastle
Operational
Cloud Backup (Asigra) Reading
Operational
Cloud Backup (Veeam) Edinburgh
Operational
Cloud Backup (Veeam) Milton Keynes
Operational
Disaster Recovery
Operational
Data Centre Services
Operational
Edinburgh Medway
Operational
Edinburgh Newbridge
Operational
Edinburgh South Gyle
Operational
Glasgow
Operational
Maidenhead
Operational
Manchester
Operational
Milton Keynes
Operational
Newcastle Central
Operational
Newcastle East
Operational
Reading
Operational
Sheffield
Operational
South London
Operational
Managed Cloud
Operational
Azure
Operational
AWS
Operational
Cloud Storage Edinburgh
Operational
Cloud Storage Milton Keynes
Operational
Cloud Storage Newcastle Central
Operational
Cloud Storage Newcastle East
Operational
Cloud Storage Reading
Operational
Managed Office 365
Operational
Pulsant Enterprise Cloud (PEC) Edinburgh
Operational
Pulsant Enterprise Cloud (PEC) Milton Keynes
Operational
Pulsant Enterprise Cloud (PEC) Newcastle Central
Operational
Pulsant Enterprise Cloud (PEC) Newcastle East
Operational
Pulsant Enterprise Cloud (PEC) Reading
Operational
Cloud Desktop Milton Keynes
Operational
Cloud Desktop Edinburgh
Operational
Email Security Services
Operational
Managed Networks
Operational
Cloud Connect
Operational
Maidenhead
Operational
Medway
Operational
Milton Keynes
Operational
Newcastle
Operational
Newbridge
Operational
Reading
Operational
South Gyle
Operational
South London
Operational
South Yorkshire
Operational
Leased Lines
Operational
xDSL Services
Operational
IP Transit
Operational
Data Centre Failover
Operational
Content Delivery Network (CDN)
Operational
Cloud Fabric
Operational
Data Centre Connect
Operational
Metro Connect
Operational
Optical Connect
Operational
Managed Security
Operational
Cloud Protect
Operational
DDoS Protect
Operational
Threat Intelligence Alert
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.