CVE:CVE-2021-26427
CNNVD:CNNVD-202110-795
Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。
Microsoft Exchange Server存在权限许可和访问控制问题漏洞。以下产品和版本受到影响：Microsoft Exchange Server 2016 Cumulative Update 21,Microsoft Exchange Server 2019 Cumulative Update 10,Microsoft Exchange Server 2016 Cumulative Update 22,Microsoft Exchange Server 2019 Cumulative Update 11,Microsoft Exchange Server 2013 Cumulative Update 23
solution:Upgrade microsoft exchange_server to a higher version than 2013:cumulative_update_23,2016:cumulative_update_21,2016:cumulative_update_22,2019:cumulative_update_10,2019:cumulative_update_11,and avoid the version 2013:cumulative_update_23,2016:cumulative_update_21,2016:cumulative_update_22,2019:cumulative_update_10,2019:cumulative_update_11