The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by a spoofing vulnerability. External attackers could send specially crafted emails that will cause a connection from the victim to an untrusted location of attackers' control. This will leak the Net-NTLMv2 hash of the victim to the untrusted network which an attacker can then relay to another service and authenticate as the victim. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version…Read More
Security Updates Outlook for Windows (April 2024)
