Exchange bug could expose coworkers’ email and attachments
Daily Cyber News: Exchange bug could expose coworkers’ email and attachments
An authenticated attacker could read other users’ emails and attachments because of a high-severity authorization weakness in Exchange Server. The access is limited to people in the same organization and does not cross tenant boundaries.
Key context: Microsoft has released an out-of-band update for supported on-premises Exchange versions.
Additional detail: Mailbox access can reveal confidential conversations, invoices, contracts, attachments, and information that supports convincing impersonation.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, active exploitation, Exchange, expose, coworkers, email, attachments.
