{"id":733,"date":"2021-03-03T16:06:44","date_gmt":"2021-03-03T16:06:44","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/exchangemicrosoftcve\/"},"modified":"2026-11-04T08:45:05","modified_gmt":"2026-11-04T08:45:05","slug":"exchangemicrosoftcve","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/exchangemicrosoftcve\/","title":{"rendered":"Ranjivost u sustavu Microsoft Exchange"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Microsoft je objavio va\u017enu obavijest o <strong>4 ranjivosti<\/strong> koje zahva\u0107aju sustave Exchange Server 2013, Exchange Server 2016  i Exchange Server 2019 koje omogu\u0107avaju preuzimanje kontrole nad ranjivim Exchange poslu\u017eiteljima. Tako\u0111er, za sve korisnike sustava Exchange Server 2010, Microsoft je objavio i detaljnu analizu s uputama za uklanjanje ranjivosti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft je zabilje\u017eio ograni\u010dene usmjerene napade na poslu\u017eitelje sustava Exchange koje su izvodili dr\u017eavno potpomognuti akteri u kojima su iskori\u0161tene \u010detiri ranjivosti iz skupine ranjivosti sustava Exchange o kojima je rije\u010d u ovoj obavijesti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Microsoft<\/strong> <strong>preporu\u010duje<\/strong> sljede\u0107e <strong>akcije<\/strong>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ozna\u010davanje visokim prioritetom a\u017euriranje sigurnosnim nadogradnjama koje izlaze u o\u017eujku kako bi se kriti\u010dne sigurnosne ranjivosti uklonile.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Davanje prioriteta Exchange poslu\u017eiteljima koji su izlo\u017eeni internetu zbog pove\u0107anog rizika.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Uzimanje u obzir dodatnog vremenskog optere\u0107enja prilikom nadogradnje Exchange poslu\u017eitelja koji nisu pokretani trenutno podr\u017eanim Update Rollup (UP) i Cumulative Update (CU) nadogradnjama.<br><br>Dodatnu provjeru pristupom na poveznice koje su navedene u nastavku, a koje pru\u017eaju vrijedne informacije te savjete kako ukloniti prona\u0111enu ranjivost.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 Exchange Team Blog: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-march-2021-exchange-server-security-updates\/ba-p\/2175901\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/techcommunity.microsoft.com\/t5\/exchange-team-blog\/released-march-2021-exchange-server-security-updates\/ba-p\/2175901<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br><strong>\u2022 MSRC blog:<\/strong> <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/msrc-blog.microsoft.com\/2021\/03\/02\/multiple-security-updates-released-for-exchange-server\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/msrc-blog.microsoft.com\/2021\/03\/02\/multiple-security-updates-released-for-exchange-server<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 On the Issues (MOTI) blog: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/?p=64505\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/blogs.microsoft.com\/on-the-issues\/?p=64505<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 CVE-2021-26855 | Microsoft Exchange Server Remote Code Execution Vulnerability: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-26855\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-26855<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 CVE-2021-26857 | Microsoft Exchange Server Remote Code Execution Vulnerability: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-26857\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-26857<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 CVE-2021-26858 | Microsoft Exchange Server Remote Code Execution Vulnerability: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-26858\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-26858<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 CVE-2021-27065 | Microsoft Exchange Server Remote Code Execution Vulnerability: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-27065\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2021-27065<\/a><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2022 The Security Update Guide: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"http:\/\/aka.ms\/securityupdateguide\" target=\"_blank\" rel=\"noreferrer noopener\">http:\/\/aka.ms\/securityupdateguide<\/a><br><br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Microsoft Threat Intelligence Center (MSTIC) <\/strong>je, u objavi kojoj je mogu\u0107e pristupiti putem poveznice u nastavku, naveo tehni\u010dke upute koje opisuju na koji je na\u010din mogu\u0107e otkriti ostvarene napade koji su koristili ove ranjivosti:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/02\/hafnium-targeting-exchange-servers\/\">https:\/\/www.microsoft.com\/security\/blog\/2021\/03\/02\/hafnium-targeting-exchange-servers<\/a>\/<\/p>","protected":false},"excerpt":{"rendered":"<p>Microsoft je objavio va\u017enu obavijest o 4 ranjivosti koje zahva\u0107aju sustave Exchange Server 2013, Exchange Server 2016 i Exchange Server 2019 koje omogu\u0107avaju preuzimanje kontrole nad ranjivim Exchange poslu\u017eiteljima. Tako\u0111er, za sve korisnike sustava Exchange Server 2010, Microsoft je objavio i detaljnu analizu s uputama za uklanjanje ranjivosti. Microsoft je zabilje\u017eio ograni\u010dene usmjerene napade na [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1130,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=733"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/733\/revisions"}],"predecessor-version":[{"id":1132,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/733\/revisions\/1132"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1130"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=733"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=733"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}