Microsoft Exchange Server Information Disclosure Vulnerability

A security flaw in Microsoft Exchange Server allows attackers to read sensitive information like emails and calendar data without proper authentication. This happens through a weakness in how the server handles certain requests.

This vulnerability permits unauthenticated attackers to disclose sensitive information stored on Exchange Server instances through an improper input validation flaw in the server's request handling mechanism. The attack requires network access to the affected Exchange service and can result in unauthorized access to mailbox contents, calendar data, and other confidential information without requiring valid credentials.