Vulnerability (CVE-2022-41080

[WaqasAhmedMir]

Hello Everyone,

Hope you are all doing well,

Yesterday I was received vulnerability email from paloalto.

• Palo Alto Networks released this emergency content update for a critical Server-Side Request Forgery Vulnerability in Microsoft Exchange (CVE-2022-41080) that is actively exploited in the wild.

Can you please confirm which PA version got effected from this vulnerability. I am using 10.2.2-h2.

Thank You

[ymiyashita]

PA firewall is not the one which is affected. Palo Alto Networks released a signature (TID: 93319) to mitigate the issue in the Microsoft Exchange Server (CVE-2022-41080).

Reference:
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080