Exchange Server Privilege Escalation

Microsoft Exchange Server is a popular email server software used by many organizations. This vulnerability allows an authorized attacker to elevate privileges over a network, potentially leading to unauthorized access to sensitive data and systems.

You're affected if you use Improper. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Apply the security update from Microsoft's website: https://support.microsoft.com/en-us/topic/fix-it-for-microsoft-exchange-server-2016-cu3-bfdd8c5d-2a4e-47b9-a7c0-fd0f8c9d3a29
2. Immediate mitigations:
3. Restrict network access to your Exchange Server instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized privilege escalations

• msrc.microsoft.com