/>
X

Microsoft warns of new server vulnerability

Microsoft said it is looking into "public reports of a possible vulnerability in Microsoft Internet Information Services (IIS).
zd-defaultauthor-ina-fried.jpg
Written by Ina Fried on
A new, unpatched vulnerability exists in one of Microsoft's server products, the company warned late on Monday.

In a technical bulletin, the company said it is looking into "public reports of a possible vulnerability in Microsoft Internet Information Services (IIS)."

The company said that a flaw exists in a certain type of web-serving operation.

"An elevation of privilege vulnerability exists in the way that the WebDAV extension for IIS handles HTTP requests," Microsoft said. "An attacker could exploit this vulnerability by creating a specially crafted anonymous HTTP request to gain access to a location that typically requires authentication."

Microsoft said it is not aware of attacks using the vulnerability. The company said it may provide an update as part of its monthly Patch Tuesday or, depending on the severity, could provide a fix outside its monthly patching schedule.

In the meantime, the company listed on its website certain configuration settings that can help mitigate the impact of the flaw.

This article was originally posted on CNET News.

Related

Apple politely explains why iPhone cases are a waste of money
Apple iPhone 13 Pro Max

Apple politely explains why iPhone cases are a waste of money

Apple
The 8 best iPhone models of 2022
iphone-12-models.png

The 8 best iPhone models of 2022

iPhone
Delta Air Lines just made a callous admission that customers may find galling
screen-shot-2022-07-18-at-5-18-46-pm.png

Delta Air Lines just made a callous admission that customers may find galling

Business