{"id":308,"date":"2023-03-15T20:12:03","date_gmt":"2023-03-15T20:12:03","modified":"2023-03-15T20:12:05","modified_gmt":"2023-03-15T20:12:05","slug":"vulnerabilidad-de-microsoft-outlook","status":"publish","type":"post","link":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/","title":{"rendered":"Vulnerabilidad de Microsoft Outlook"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

El Departamento de Seguridad de la Informaci\u00f3n de IATec desarroll\u00f3 este documento con el fin de presentar la vulnerabilidad de Microsoft Outlook, sus especificaciones y recomendaci\u00f3n de soluci\u00f3n.<\/p>\n\n\n

Lanzamento:<\/strong> 14 de marzo de 2023
CVSS<\/strong> (N\u00edvel de Criticidad): 9.8 - Cr\u00edtico<\/span><\/strong>
CVE<\/strong> (Cat\u00e1logo de Vulnerabilides): CVE-2023-23397 [1]
Impacto:<\/strong> Elevaci\u00f3n de Privilegios
Proveedor:<\/strong> Microsoft<\/p>\n\n\n

<\/th><\/th><\/tr><\/thead>
M\u00e9trica<\/strong><\/td>Valor<\/strong><\/td><\/tr>
Vector de Ataque<\/td>Red<\/mark><\/td><\/tr>
Complejidad de Ataque<\/td>Bajo<\/td><\/tr>
Privilegios Requeridos<\/td>Ninguno<\/td><\/tr>
Interacci\u00f3n del Usuario<\/td>Ninguno<\/td><\/tr>
Alcance<\/td>Sin alterar<\/td><\/tr>
Confidencialidad<\/td>Alto<\/td><\/tr>
Integridad<\/td>Alto<\/td><\/tr>
Disponibilidad<\/td>Alto<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

SOLUCI\u00d3N<\/h2>\n\n\n

Microsoft ha publicado una actualizaci\u00f3n en su Patch Tuesday para una vulnerabilidad cr\u00edtica en el software de Outlook. La vulnerabilidad permite a los atacantes externos enviar correos electr\u00f3nicos especialmente dise\u00f1ados, activados autom\u00e1ticamente cuando el servidor de correo los recupera y procesa, lo que har\u00e1 que la v\u00edctima se conecte a una ubicaci\u00f3n UNC externa bajo el control de los atacantes. Esto filtrar\u00e1 el hash Net-NTLMv2 de la v\u00edctima al atacante, quien puede transmitirlo a otro servicio y autenticarse como v\u00edctima. La vulnerabilidad podr\u00eda explotarse antes de que se obtenga una vista previa del correo electr\u00f3nico en el panel de vista previa del software.
La CISA (Cybersecurity & Infrastructure Security Agency) ha incluido esta vulnerabilidad en su cat\u00e1logo de vulnerabilidades explotadas activamente [2]. 3. SOLUCI\u00d3N
Microsoft lanz\u00f3 actualizaciones que mitigan esta vulnerabilidad y otras en su Patch Tuesday el 14\/03\/2023. La siguiente tabla describe el producto y la actualizaci\u00f3n correspondiente:<\/p>\n\n\n

Producto<\/th>Art\u00edculo<\/th>Download<\/th><\/tr><\/thead>
Microsoft Outlook 2016 (64-bit edition)<\/td>5002254<\/a><\/td>Security Update<\/a><\/td><\/tr>
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)<\/td>5002265<\/a><\/td>Security Update<\/a><\/td><\/tr>
Microsoft Outlook 2013 RT Service Pack 1<\/td>5002265<\/a><\/td>Security Update<\/a><\/td><\/tr>
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)<\/td>5002265<\/a><\/td>Security Update<\/a><\/td><\/tr>
Microsoft Office 2019 for 32-bit editions<\/td>Click to Run<\/a><\/td>Security Update<\/td><\/tr>
Microsoft 365 Apps for Enterprise for 32-bit Systems<\/td>Click to Run<\/a><\/td>Security Update<\/td><\/tr>
Microsoft Office 2019 for 64-bit editions<\/td>Click to Run<\/a><\/td>Security Update<\/td><\/tr>
Microsoft 365 Apps for Enterprise for 64-bit Systems<\/td>Click to Run<\/a><\/td>Security Update<\/td><\/tr>
Microsoft Office LTSC 2021 for 64-bit editions<\/td>Click to Run<\/a><\/td>Security Update<\/td><\/tr>
Microsoft Outlook 2016 (32-bit edition)<\/td>5002254<\/a><\/td>Security Update<\/a><\/td><\/tr>
Microsoft Office LTSC 2021 for 32-bit editions<\/td>Click to Run<\/a><\/td>Security Update<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n

Le recomendamos que instale actualizaciones relacionadas con el producto y las \u00faltimas actualizaciones del sistema operativo para garantizar una mayor protecci\u00f3n.<\/p>\n\n\n

\n\n\n\n

REFERENCIAS<\/strong>
CVE-2023-23397
https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-23397<\/a>
Known Exploited Vulnerabilities Catalog
https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog<\/a>
Microsoft Outlook Elevation of Privilege Vulnerability
https:\/\/msrc.microsoft.com\/update-guide\/vulnerability\/CVE-2023-23397<\/a><\/p>\n\n\n\n

\n\n\n\n

Si tiene preguntas sobre este documento y su contenido, puede contactarse a trav\u00e9s del siguiente correo electr\u00f3nico: security@iatec.com<\/a><\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

El Departamento de Seguridad de la Informaci\u00f3n de IATec desarroll\u00f3 este documento con el fin de presentar la vulnerabilidad de Microsoft Outlook, sus especificaciones y recomendaci\u00f3n de soluci\u00f3n. Lanzamento: 14 de marzo de 2023CVSS (N\u00edvel de Criticidad): 9.8 - Cr\u00edticoCVE (Cat\u00e1logo de Vulnerabilides): CVE-2023-23397 [1]Impacto: Elevaci\u00f3n de PrivilegiosProveedor: Microsoft M\u00e9trica Valor Vector de Ataque Red […]<\/p>\n","protected":false},"author":1,"featured_media":310,"comment_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-308","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"acf":[],"yoast_head":"\nVulnerabilidad de Microsoft Outlook - Tecnolog\u00eda<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad de Microsoft Outlook - Tecnolog\u00eda\" \/>\n<meta property=\"og:description\" content=\"El Departamento de Seguridad de la Informaci\u00f3n de IATec desarroll\u00f3 este documento con el fin de presentar la vulnerabilidad de Microsoft Outlook, sus especificaciones y recomendaci\u00f3n de soluci\u00f3n. Lanzamento: 14 de marzo de 2023CVSS (N\u00edvel de Criticidad): 9.8 - Cr\u00edticoCVE (Cat\u00e1logo de Vulnerabilides): CVE-2023-23397 [1]Impacto: Elevaci\u00f3n de PrivilegiosProveedor: Microsoft M\u00e9trica Valor Vector de Ataque Red […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/\" \/>\n<meta property=\"og:site_name\" content=\"Tecnolog\u00eda\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-15T20:12:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-15T20:12:05+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1460\" \/>\n\t<meta property=\"og:image:height\" content=\"960\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ema Leuci\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ema Leuci\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/\"},\"author\":{\"name\":\"Ema Leuci\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/#\\\/schema\\\/person\\\/038495b4e6ae6a4f7e34e607cbcee36f\"},\"headline\":\"Vulnerabilidad de Microsoft Outlook\",\"datePublished\":\"2023-03-15T20:12:03+00:00\",\"dateModified\":\"2023-03-15T20:12:05+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/\"},\"wordCount\":433,\"image\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/wp-content\\\/uploads\\\/sites\\\/47\\\/2023\\\/03\\\/outlook.jpg\",\"inLanguage\":\"es\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/\",\"url\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/\",\"name\":\"Vulnerabilidad de Microsoft Outlook - Tecnolog\u00eda\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/wp-content\\\/uploads\\\/sites\\\/47\\\/2023\\\/03\\\/outlook.jpg\",\"datePublished\":\"2023-03-15T20:12:03+00:00\",\"dateModified\":\"2023-03-15T20:12:05+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/#\\\/schema\\\/person\\\/038495b4e6ae6a4f7e34e607cbcee36f\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/wp-content\\\/uploads\\\/sites\\\/47\\\/2023\\\/03\\\/outlook.jpg\",\"contentUrl\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/wp-content\\\/uploads\\\/sites\\\/47\\\/2023\\\/03\\\/outlook.jpg\",\"width\":1460,\"height\":960},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/vulnerabilidad-de-microsoft-outlook\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad de Microsoft Outlook\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/\",\"name\":\"Tecnolog\u00eda\",\"description\":\"Otro sitio m\u00e1s de Sitios de Iglesia Adventista en Argentina\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/#\\\/schema\\\/person\\\/038495b4e6ae6a4f7e34e607cbcee36f\",\"name\":\"Ema Leuci\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2f7aa0c35193488173f16cb794b052924c3ac05e9aae16ed135f674a29effe6c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2f7aa0c35193488173f16cb794b052924c3ac05e9aae16ed135f674a29effe6c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2f7aa0c35193488173f16cb794b052924c3ac05e9aae16ed135f674a29effe6c?s=96&d=mm&r=g\",\"caption\":\"Ema Leuci\"},\"url\":\"https:\\\/\\\/ua.adventistas.org\\\/it\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerabilidad de Microsoft Outlook - Tecnolog\u00eda","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/","og_locale":"es_ES","og_type":"article","og_title":"Vulnerabilidad de Microsoft Outlook - Tecnolog\u00eda","og_description":"El Departamento de Seguridad de la Informaci\u00f3n de IATec desarroll\u00f3 este documento con el fin de presentar la vulnerabilidad de Microsoft Outlook, sus especificaciones y recomendaci\u00f3n de soluci\u00f3n. Lanzamento: 14 de marzo de 2023CVSS (N\u00edvel de Criticidad): 9.8 - Cr\u00edticoCVE (Cat\u00e1logo de Vulnerabilides): CVE-2023-23397 [1]Impacto: Elevaci\u00f3n de PrivilegiosProveedor: Microsoft M\u00e9trica Valor Vector de Ataque Red […]","og_url":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/","og_site_name":"Tecnolog\u00eda","article_published_time":"2023-03-15T20:12:03+00:00","article_modified_time":"2023-03-15T20:12:05+00:00","og_image":[{"width":1460,"height":960,"url":"http:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg","type":"image\/jpeg"}],"author":"Ema Leuci","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Ema Leuci","Tiempo de lectura":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#article","isPartOf":{"@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/"},"author":{"name":"Ema Leuci","@id":"https:\/\/ua.adventistas.org\/it\/#\/schema\/person\/038495b4e6ae6a4f7e34e607cbcee36f"},"headline":"Vulnerabilidad de Microsoft Outlook","datePublished":"2023-03-15T20:12:03+00:00","dateModified":"2023-03-15T20:12:05+00:00","mainEntityOfPage":{"@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/"},"wordCount":433,"image":{"@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#primaryimage"},"thumbnailUrl":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg","inLanguage":"es"},{"@type":"WebPage","@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/","url":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/","name":"Vulnerabilidad de Microsoft Outlook - Tecnolog\u00eda","isPartOf":{"@id":"https:\/\/ua.adventistas.org\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#primaryimage"},"image":{"@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#primaryimage"},"thumbnailUrl":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg","datePublished":"2023-03-15T20:12:03+00:00","dateModified":"2023-03-15T20:12:05+00:00","author":{"@id":"https:\/\/ua.adventistas.org\/it\/#\/schema\/person\/038495b4e6ae6a4f7e34e607cbcee36f"},"breadcrumb":{"@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#primaryimage","url":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg","contentUrl":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg","width":1460,"height":960},{"@type":"BreadcrumbList","@id":"https:\/\/ua.adventistas.org\/it\/vulnerabilidad-de-microsoft-outlook\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/ua.adventistas.org\/it\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad de Microsoft Outlook"}]},{"@type":"WebSite","@id":"https:\/\/ua.adventistas.org\/it\/#website","url":"https:\/\/ua.adventistas.org\/it\/","name":"Tecnolog\u00eda","description":"Otro sitio m\u00e1s de Sitios de Iglesia Adventista en Argentina","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ua.adventistas.org\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/ua.adventistas.org\/it\/#\/schema\/person\/038495b4e6ae6a4f7e34e607cbcee36f","name":"Ema Leuci","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/2f7aa0c35193488173f16cb794b052924c3ac05e9aae16ed135f674a29effe6c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2f7aa0c35193488173f16cb794b052924c3ac05e9aae16ed135f674a29effe6c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2f7aa0c35193488173f16cb794b052924c3ac05e9aae16ed135f674a29effe6c?s=96&d=mm&r=g","caption":"Ema Leuci"},"url":"https:\/\/ua.adventistas.org\/it\/author\/admin\/"}]}},"featured_media_url":{"full":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook.jpg","medium":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook-768x505.jpg","small":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook-240x135.jpg","pa-block-preview":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook-240x135.jpg","pa-block-render":"https:\/\/ua.adventistas.org\/it\/wp-content\/uploads\/sites\/47\/2023\/03\/outlook-480x270.jpg"}}