{"id":45,"date":"2017-04-06T03:56:52","date_gmt":"2017-04-06T09:26:52","guid":{"rendered":"https:\/\/www.whatisfileextension.com\/tutorials\/?p=45"},"modified":"2018-02-12T01:57:41","modified_gmt":"2018-02-12T07:27:41","slug":"ms-exchange-information-disclosure-update","status":"publish","type":"post","link":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/","title":{"rendered":"MS Exchange Elevation Privilege & Information Disclosure Update"},"content":{"rendered":"

 <\/p>\n

This article will give brief information about How to Perform Security Update for Microsoft Exchange Server. The errors caused in Elevation Privilege and Information Disclosure can be solved using this article.<\/p>\n

 <\/p>\n

Introduction to Update Exchange Server and Security in 2007, 2010, 2016<\/strong><\/h1>\n

 <\/p>\n

Note:<\/strong> It might be possible that Microsoft stops providing Security Update for Microsoft Exchange Server 2007 in coming years(Possible date of End of support is on 11th april 2017). You might consider changing it into new versions. Also, this article is for servers that use third party tool. It describe Elevation of Privilege and Information Disclosure Vulnerabilities<\/p>\n

 <\/p><\/blockquote>\n

If you are reading this article you might have an idea about Exchange Server. Let’s learn briefly about Microsoft 2016, 2010 and 2007 servers and this issue for a start. The above Microsoft Exchange Versions use external Applications. This update is specifically designed for those issues. Since by using third party tools within Exchange you provide privileges to other software. Hence, this update is released to overcome that issue.<\/p>\n

The update does two tasks and mainly for two types of vulnerability:<\/p>\n

1. Oracle Outside In Libraries Elevation of Privilege Vulnerabilities<\/p>\n

2. Microsoft Exchange Information Disclosure Vulnerability<\/p>\n

 <\/p>\n

Note:<\/strong> Your Data might be vulnerable even after following issues are rectified. Microsoft clearly states that they do not take responsibility for data loss or theft even after these updates.<\/p>\n

 <\/p><\/blockquote>\n

Reason for providing Security Update against Cross-Site Request Forgery(CSRF) in\u00a0Exchange Server<\/strong><\/h2>\n

 <\/p>\n

The Exchange 2016, 2010 and 2007 update against Cross-Site Request Forgery (CSRF) on Outlook Web Access (OWA)<\/strong> is based following reasons:<\/p>\n

1. Email Filters that allow Information disclosure<\/p>\n

2. Vulnerability to user identity, fingerprint(online) risks<\/p>\n

3. Danger to security of Outlook web address Book<\/p>\n

 <\/p>\n

What needs to be Done against Information Disclosure Vulnerability Issue in Exchange Server?<\/strong><\/h2>\n

It must be remembered that Microsoft keeps on updating its security updates for various versions Outlook Web Access (OWA). The user needs to keep track of these updates so that they can identify the security risks and its solutions. To do so you may also check updates on this blog.<\/p>\n

This update was required for following the version of Microsoft based on Information Disclosure and Elevation of Privilege vulnerability. Th following versions were affected during this update.<\/p>\n

 <\/p>\n

For Elevation of Privilege Vulnerability in\u00a0Exchange Server<\/strong><\/h3>\n

\"\"<\/p>\n

 <\/p>\n

For Information Disclosure vulnerability in\u00a0Exchange Server<\/strong><\/h3>\n

\"\"<\/p>\n

 <\/p>\n

For Oracle Outside In Libraries Vulnerability Update of Exchange Server<\/strong><\/h3>\n

Their following Elevation of Privilege Vulnerabilities is resolved for Oracle Critical Patch Advisory.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Conclusion<\/strong><\/p>\n

The above article is based on Security Update for Microsoft Exchange Server. Remember, the changes in vulnerabilities for Oracle Outside in Libraries and Outlook Web Access (OWA) that are associated with MS Exchange server will also change the working. There are various issues faced by a user when they implemented Elevation Privilege and Information Disclosure changes in Exchange Server 2007, 2010 and 2016. But this will increase the security of MS Servers.<\/p>\n","protected":false},"excerpt":{"rendered":"

  This article will give brief information about How to Perform Security Update for Microsoft Exchange Server. The errors caused in Elevation Privilege and Information Disclosure can be solved using this article.   Introduction to Update Exchange Server and Security in 2007, 2010, 2016   Note: It might be possible that Microsoft stops providing Security […]<\/p>\n","protected":false},"author":1,"featured_media":59,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-45","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general"],"yoast_head":"\nMS Exchange Elevation Privilege & Information Disclosure Update<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MS Exchange Elevation Privilege & Information Disclosure Update\" \/>\n<meta property=\"og:description\" content=\"  This article will give brief information about How to Perform Security Update for Microsoft Exchange Server. The errors caused in Elevation Privilege and Information Disclosure can be solved using this article.   Introduction to Update Exchange Server and Security in 2007, 2010, 2016   Note: It might be possible that Microsoft stops providing Security […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/\" \/>\n<meta property=\"og:site_name\" content=\"My WordPress Website\" \/>\n<meta property=\"article:published_time\" content=\"2017-04-06T09:26:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-02-12T07:27:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2017\/04\/elevate-edb.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"250\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#\\\/schema\\\/person\\\/fca0da1fb88c03fa70fa703a1fba355d\"},\"headline\":\"MS Exchange Elevation Privilege & Information Disclosure Update\",\"datePublished\":\"2017-04-06T09:26:52+00:00\",\"dateModified\":\"2018-02-12T07:27:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/\"},\"wordCount\":487,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/elevate-edb.png\",\"articleSection\":[\"General\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/\",\"url\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/\",\"name\":\"MS Exchange Elevation Privilege & Information Disclosure Update\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/elevate-edb.png\",\"datePublished\":\"2017-04-06T09:26:52+00:00\",\"dateModified\":\"2018-02-12T07:27:41+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/elevate-edb.png\",\"contentUrl\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2017\\\/04\\\/elevate-edb.png\",\"width\":300,\"height\":250},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/ms-exchange-information-disclosure-update\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MS Exchange Elevation Privilege & Information Disclosure Update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#website\",\"url\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/\",\"name\":\"My WordPress Website\",\"description\":\"Delve Into Technology Documents\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#organization\",\"name\":\"What Is File Extension\",\"url\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/logo.png\",\"width\":220,\"height\":41,\"caption\":\"What Is File Extension\"},\"image\":{\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/#\\\/schema\\\/person\\\/fca0da1fb88c03fa70fa703a1fba355d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0a061725a6089aefb9427116283fd9ad67bffe571c088eb108b551c915c3c3c3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0a061725a6089aefb9427116283fd9ad67bffe571c088eb108b551c915c3c3c3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/0a061725a6089aefb9427116283fd9ad67bffe571c088eb108b551c915c3c3c3?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"url\":\"https:\\\/\\\/www.whatisfileextension.com\\\/tutorials\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"MS Exchange Elevation Privilege & Information Disclosure Update","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/","og_locale":"en_US","og_type":"article","og_title":"MS Exchange Elevation Privilege & Information Disclosure Update","og_description":"  This article will give brief information about How to Perform Security Update for Microsoft Exchange Server. The errors caused in Elevation Privilege and Information Disclosure can be solved using this article.   Introduction to Update Exchange Server and Security in 2007, 2010, 2016   Note: It might be possible that Microsoft stops providing Security […]","og_url":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/","og_site_name":"My WordPress Website","article_published_time":"2017-04-06T09:26:52+00:00","article_modified_time":"2018-02-12T07:27:41+00:00","og_image":[{"width":300,"height":250,"url":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2017\/04\/elevate-edb.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#article","isPartOf":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/"},"author":{"name":"admin","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#\/schema\/person\/fca0da1fb88c03fa70fa703a1fba355d"},"headline":"MS Exchange Elevation Privilege & Information Disclosure Update","datePublished":"2017-04-06T09:26:52+00:00","dateModified":"2018-02-12T07:27:41+00:00","mainEntityOfPage":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/"},"wordCount":487,"commentCount":0,"publisher":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#organization"},"image":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#primaryimage"},"thumbnailUrl":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2017\/04\/elevate-edb.png","articleSection":["General"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/","url":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/","name":"MS Exchange Elevation Privilege & Information Disclosure Update","isPartOf":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#primaryimage"},"image":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#primaryimage"},"thumbnailUrl":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2017\/04\/elevate-edb.png","datePublished":"2017-04-06T09:26:52+00:00","dateModified":"2018-02-12T07:27:41+00:00","breadcrumb":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#primaryimage","url":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2017\/04\/elevate-edb.png","contentUrl":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2017\/04\/elevate-edb.png","width":300,"height":250},{"@type":"BreadcrumbList","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/ms-exchange-information-disclosure-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.whatisfileextension.com\/tutorials\/"},{"@type":"ListItem","position":2,"name":"MS Exchange Elevation Privilege & Information Disclosure Update"}]},{"@type":"WebSite","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#website","url":"https:\/\/www.whatisfileextension.com\/tutorials\/","name":"My WordPress Website","description":"Delve Into Technology Documents","publisher":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.whatisfileextension.com\/tutorials\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#organization","name":"What Is File Extension","url":"https:\/\/www.whatisfileextension.com\/tutorials\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#\/schema\/logo\/image\/","url":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2019\/08\/logo.png","contentUrl":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-content\/uploads\/2019\/08\/logo.png","width":220,"height":41,"caption":"What Is File Extension"},"image":{"@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.whatisfileextension.com\/tutorials\/#\/schema\/person\/fca0da1fb88c03fa70fa703a1fba355d","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0a061725a6089aefb9427116283fd9ad67bffe571c088eb108b551c915c3c3c3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0a061725a6089aefb9427116283fd9ad67bffe571c088eb108b551c915c3c3c3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0a061725a6089aefb9427116283fd9ad67bffe571c088eb108b551c915c3c3c3?s=96&d=mm&r=g","caption":"admin"},"url":"https:\/\/www.whatisfileextension.com\/tutorials\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/posts\/45","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/comments?post=45"}],"version-history":[{"count":9,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/posts\/45\/revisions"}],"predecessor-version":[{"id":54,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/posts\/45\/revisions\/54"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/media\/59"}],"wp:attachment":[{"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/media?parent=45"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/categories?post=45"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whatisfileextension.com\/tutorials\/wp-json\/wp\/v2\/tags?post=45"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}