VULHUB ™

A flaw has been reported in the Microsoft Exchange System Attendant, which could allow unprivileged users access to the WinReg key. The WinReg key controls users and groups ability to connect remotely to the registry. The System Attendant must ensure the that the Microsoft Exchange System Manager can remotely connect, in doing so, the System Attendant adds the 'Everyone' group to the WinReg key.

A flaw has been reported in the Microsoft Exchange System Attendant, which could allow unprivileged users access to the WinReg key. The WinReg key controls users and groups ability to connect remotely to the registry. The System Attendant must ensure the that the Microsoft Exchange System Manager can remotely connect, in doing so, the System Attendant adds the 'Everyone' group to the WinReg key.