CVE-2017-11761

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2013 through 2016

Description The issue is related to an input sanitization problem that could lead to unintended information disclosure. An attacker who successfully exploits this could identify the existence of internal network addresses from a client on the Internet, potentially using this information as part of a larger attack.

Recommendations For Microsoft Exchange Server 2013, update to a version that includes the fix for this issue. For Microsoft Exchange Server 2016, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to sensitive network information to minimize the risk of exploitation.