Summary

Microsoft's disclosure of CVE-2024-21410 reveals an actively exploited vulnerability in Exchange Server, facilitating NTLM relay attacks and privilege escalation. Extended Protection for Authentication (EPA) is enabled by default in Exchange Server 2019 CU14. Timely updates and robust security measures are crucial for mitigation.

Description