One of the great benefits to running one of the world’s largest Exchange deployments is that we at Microsoft get to see all the things that our customers face on a daily basis. With the recent rele...
Updated Jul 01, 2019
Version 2.0
Blog Post
@Andrew; Steven Presley; Tony...
(ref: http://www.zarafa.com/blog/post/2012/10/ios6-meeting-hijacking-fixed-open-source-activesync-implementation-z-push)
Whenever a meeting item is pushed to the iPhone in which there are no attendees, the iPhone will assume that it is the organizer of that meeting. This is absolutely incorrect, and is the root cause of all the problems...
This is a nasty 0-attendee bug in iOS!
Why Exchange allows EAS client to do this?
An EAS client is 'allowed' to just change the organizer of the meeting in the appointment. All it has to do is send a 'bad' item update to the server and the server will accept this. Until now it always 'trusted' the client not to break things, and not disallowed any bad behavior from clients.
Even if you block the EAS client from changing the item in the calendar, the device is actually sending it's own SMTP messages to actually send the cancellation...