An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka Microsoft Exchange Information Disclosure Vulnerability. This affects Microsoft Exchange Server.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exchange_server | Microsoft | 2010-sp3_rollup25 (including) | 2010-sp3_rollup25 (including) |
| Exchange_server | Microsoft | 2013-cumulative_update_21 (including) | 2013-cumulative_update_21 (including) |
| Exchange_server | Microsoft | 2016-cumulative_update_10 (including) | 2016-cumulative_update_10 (including) |
| Exchange_server | Microsoft | 2016-cumulative_update_11 (including) | 2016-cumulative_update_11 (including) |
| Exchange_server | Microsoft | 2019 (including) | 2019 (including) |