Microsoft Exchange CVE-2018-0941 Information Disclosure Vulnerability

description-logoDescription

An information disclosure vulnerability exists in the way that Microsoft Exchange Server handles importing data. If an impacted user is using Microsoft Exchange Outlook Web Access (OWA), the vulnerability could allow an attacker to discover sensitive information that should otherwise not be disclosed.

affected-products-logoAffected Applications

Microsoft Exchange Server 2016 Cumulative Update 7
Microsoft Exchange Server 2016 Cumulative Update 8

CVE References

CVE-2018-0941