ProxyToken Authentication Bypass Flaw Allows Hackers To Copy Victims’ Emails on Vulnerable Microsoft Exchange Servers

Security researcher Le Xuan Tuyen found a Microsoft Exchange server bug that enables menace actors to entry person’s emails via an authentication bypass flaw. Dubbed ProxyToken, CVE-2021-33766 permits an attacker to change e-mail forwarding guidelines to copy all emails addressed to a goal to an account managed...