The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exchange_server | Microsoft | 2016-cumulative_update_16 (including) | 2016-cumulative_update_16 (including) |
| Exchange_server | Microsoft | 2016-cumulative_update_17 (including) | 2016-cumulative_update_17 (including) |
| Exchange_server | Microsoft | 2019-cumulative_update_5 (including) | 2019-cumulative_update_5 (including) |
| Exchange_server | Microsoft | 2019-cumulative_update_6 (including) | 2019-cumulative_update_6 (including) |