Edward Morris

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.