Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.