Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ExchangeOABVirtualDirectoryAttributeContainingPotentialWebshell description points to reference URL that is 404 #8997

Closed
ktb-jcm opened this issue Sep 12, 2023 · 4 comments · Fixed by #9040
Assignees
Labels
Solution Solution specialty review needed

Comments

@ktb-jcm
Copy link
Contributor

ktb-jcm commented Sep 12, 2023

Describe the bug
The solution for "Exchange OAB Virtual Directory Attribute Containing Potential Webshell" refers to the Microsoft-controlled URL "https://aka.ms/ExchangeVulns" which redirects to "https://msrc.microsoft.com/blog/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/blog.microsoft.com/2021/03/02/multiple-security-updates-released-for-exchange-server/" however that page is listed as 404 page Not Found as of 9/12/23.

To Reproduce
Steps to reproduce the behavior:
Open the links, see for yourself, :)

Expected behavior
Need a proper reference URL if it is available, or Microsoft needs to re-store the missing page. or if this detection is no longer relevant perhaps it should be pruned.

@github-actions
Copy link
Contributor

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

@v-amolpatil v-amolpatil added the Solution Solution specialty review needed label Sep 13, 2023
@v-sudkharat
Copy link
Contributor

Hi @ktb-jcm, thanks for flagging this issue, we will soon get back to you on this. Thanks!

@v-sudkharat
Copy link
Contributor

v-sudkharat commented Sep 15, 2023

Hi @ktb-jcm, we are working on this issue, and we will provide an update by 20 Sep 2023. Thanks

@v-sudkharat v-sudkharat linked a pull request Sep 19, 2023 that will close this issue
@v-sudkharat
Copy link
Contributor

Hello @ktb-jcm, the MSRC removed the post to which the link is redirect.
We raised the PR with the changes, and changes will be reflected in an upcoming version of the solution.
Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Solution Solution specialty review needed
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants