Include new override for Cve-2024-49040

microsoft · Nov 27, 2024 · 90bd90c · 90bd90c
1 parent fefb56e
commit 90bd90c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/Diagnostics/HealthChecker/Analyzer/Security/Invoke-AnalyzerSecurityCve-2024-49040.ps1 b/Diagnostics/HealthChecker/Analyzer/Security/Invoke-AnalyzerSecurityCve-2024-49040.ps1
@@ -21,7 +21,7 @@ function Invoke-AnalyzerSecurityCve-2024-49040 {
         $exchangeBuild = $exchangeInformation.BuildInformation.VersionInformation.BuildVersion
         # cSpell:disable
         # Need to disable cSpell because this is the name of the override
-        $filterParameterName = "AddDisclaimerforRegexMatch"
+        $filterParameterName = @("AddDisclaimerforRegexMatch", "AddP2FromRegexMatchHeader")
         # cSpell:enable
     }
     process {
@@ -37,8 +37,8 @@ function Invoke-AnalyzerSecurityCve-2024-49040 {
         [array]$nonCompliantSenderSettings = Get-FilteredSettingOverrideInformation @params
 
         $overrideDisabled = $nonCompliantSenderSettings.Count -gt 0 -and
-            ($null -ne ($nonCompliantSenderSettings | Where-Object { $_.ParameterValue -eq "false" }))
-        $isSuApplied = (Test-ExchangeBuildGreaterOrEqualThanSecurityPatch -CurrentExchangeBuild $SecurityObject.BuildInformation -SUName "Nov24SU")
+            (($nonCompliantSenderSettings | Where-Object { $_.ParameterValue -eq "false" }).Count -eq 2)
+        $isSuApplied = (Test-ExchangeBuildGreaterOrEqualThanSecurityPatch -CurrentExchangeBuild $SecurityObject.BuildInformation -SUName "Nov24SUv2")
 
         if (-not $isSuApplied -or $overrideDisabled) {
             $params = @{