Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
CWE-1390