Exchange 0-day - Isn't there a mistake in Microsoft's mitigation advice?
Exchange 0-day - Isn't there a mistake in Microsoft's mitigation advice?
Exchange 0-day - Isn't there a mistake in Microsoft's mitigation advice?
Re: Exchange 0-day - Isn't there a mistake in Microsoft's mitigation advice?
You're not wrong, their guidance is incorrect. Not the first time they pulled this crap either, remember their buggy PrintNightmare mitigations...
~~They're also matching on URL instead of REQUEST\_URI there.~~ **Edit:** Ah, I missed that, they do state that you need to change the match condition here, my bad. Please disregard the ~~deleted~~ part.
~~They're also matching on URL instead of REQUEST\_URI there.~~ **Edit:** Ah, I missed that, they do state that you need to change the match condition here, my bad. Please disregard the ~~deleted~~ part.