← Database

CVE-2000-1139

HIGH CVSS: 7.5 Published: 2001-01-09 Modified: 2026-06-16

Description

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.

Affected Platforms

Microsoft Exchange Server

Weakness Type

CWE-798

References