Microsoft Exchange Server Server-Side Request Forgery Vulnerability

This strike exploits a server-side request forgery vulnerability in Microsoft Exchange Server. The vulnerability is due to insufficient handling of requests to the autodiscover component of Exchange. An authenticated, remote attacker can exploit this vulnerability by sending a crafted request to the vulnerable Exchange server. Successful exploitation results in requests being made to backend servers. *NOTE: This strike sends a request to /mapi/nspi/ or ews/exchange.asmx which are inaccessible by default. In one-arm mode we use the authorization Administrator:Password1