Microsoft knew of Exchange Autodiscover flaw five years ago

On August 10, 2016, Marco van Beek, managing director at Supporting Role, emailed the Microsoft Security Response Center to disclose an Autodiscover exploit that worked with multiple email clients.