Recently reports of a new security vulnerability in OWA , a component of Microsoft Exchange Server, have been circulated throughout the internet. Microsoft considers the security of our products t...
Updated Jul 01, 2019
Version 2.0
Blog Post
I think the only thing the "security researchers" in this case have achieved is notoriety... pretty much anything with a logon page on a compromised web server could cough up logon credentials. How the server got compromised in the first place, which should
have been the focus of the article, could be anyone's guess. May not have even been a software vulnerability, e.g.: phishing, disgruntled employee, other software that may require admin privileges with their logon credentials in configuration files in plain
view...