Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability.
Attackers can exploit this issue to gain elevated privileges.
Information
Microsoft Exchange Server 2016 0
Microsoft Exchange Server 2013 0
Exploit
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
References:
- Abusing Exchange: One API call away from Domain Admin (Dirk-jan Mollema)
- Exchange Server Home Page (Microsoft)
- Microsoft Homepage (Microsoft)
- PrivExchange (PrivExchange)