Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

Exchange Modify

I have noticed that within MS Outlook (a user on exchange server), anybody can edit the message and save it without any indication that it's been amended (that I can see).

This change is then synchronised back to the exchange server so the amended message is shown there too.

Additionally I can send an email then edit and save it replacing the original on both my local drive and the exchange server.

Surely that is a massive security risk within organizations?

Avatar of bluetab
bluetab

When you open an email that you have already sent or received you can't make changes to it unless you are forwarding it or replying, but the original stays intact.  If you receive an email with an attachment and you open that attachment then close the email Outlook pops up with a window asking if you want to save the changes.  This is just a little oddity within Outlook.  Changes aren't being made to the email.  You can save the attachment to a location on your hard drive or server, but the attachment remains on the original email.

When you make changes to an email you received and then save it what kind of changes are you making?
Avatar of Pau Lo

ASKER

Any just to demonstrate it can be done
Avatar of Pau Lo

ASKER

>you can't make changes to it unless you are forwarding it or replying, but the original stays intact

If I right click an email, edit source, then save. It has changed. I can then forward this on to anybody I want. So I received an email saying you are eligable for $100 just send this on to your manager, I could edit this to $10000 and send it to them. And I cant see where they will notice its been modified?
Avatar of Pau Lo

ASKER

I could also edit it, then just save the changes, and it would be sat in my inbox as I changed it.
ASKER CERTIFIED SOLUTION
Avatar of bluetab
bluetab

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo

ASKER

'Some' emails remove the right click > edit message facility, but it is still incredibly easy to make amendments to them and they appear as though they are originals