"Exchange OAB Virtual Directory Attribute Containing Potential Webshell"

[carel-v98]

Not quite sure about my Tasks for this one as I do not have much experience with Exchange. Please review

[DGOV-Bryce]

Looking into the links attached and by investigating the CVE there are a number of resources that are valuable in expanding your task info and remediation steps:

• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-27065 : General advice on which versions are/aren't vulnerable (as this is mostly an update to fix situation), can be added in the remediation steps.
• https://msrc.microsoft.com/blog/2021/03/multiple-security-updates-released-for-exchange-server/ : The found link (as they must have changed location) that talks about remediation and how to scan for webshells using MS tools.

[carel-v98]

Applied the mitigation recommendations from second link and added it to the recommendations