Microsoft Outlook Web Access (OWA), when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application.
Software | From | Fixed in |
---|---|---|
microsoft / exchange_server | 2003 | 2003.x |
microsoft / exchange_server | 2003-sp1 | 2003-sp1.x |