Microsoft Exchange Server Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive information.</p> <p>To exploit the vulnerability, an attacker could send a specially crafted email message containing a malicious link to a user. Alternatively, an attacker could use a chat client to social engineer a user into clicking the malicious link.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Exchange validates web requests.</p> <p>Note: In order to exploit this vulnerability, a user must click a maliciously crafted link from an attacker.</p>

Where it's fixed