Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.