Ref# Security | Date: Mar 20th 2019

---

Description

An advisory has been released by Microsoft to address an elevation of privilege vulnerability in Microsoft Exchange Server. It is recommended to take the necessary precautions by ensuring your Exchange Server is always updated to avoid remote attackers from exploiting one of these vulnerabilities by taking control of an affected system.

• Microsoft Exchange Server Security Advisory (ADV190007 | Guidance for PrivExchange Elevation of Privilege Vulnerability) https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190007

The Guyana National CIRT recommends that users and administration review these updates and apply them where necessary.

Reference

• Microsoft Exchange server Release Security Advisory (US-Cert) https://www.us-cert.gov/ncas/current-activity/2019/02/05/Microsoft-Releases-Security-Advisory-Exchange-Server