Microsoft Exchange Server Improper Authorization Information Disclosure Vulnerability

A vulnerability exists in Microsoft Exchange Server that allows an authorized attacker to improperly disclose information over the network. This issue arises from improper authorization, enabling an authenticated user to access unauthorized data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to email attachments in other users' mailboxes within the same organization.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked in the product update information.