Skip to content

Add troubleshooting steps for wrong WebServices.dll link #1580

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bill-long merged 1 commit into from
Mar 15, 2023
Merged

Add troubleshooting steps for wrong WebServices.dll link #1580

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added docs/Security/CVE-2023-23397/attachments/CVE-2023-23397_screenshot4.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
14 changes: 13 additions & 1 deletion docs/Security/CVE-2023-23397/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ Note: The script uses Microsoft.Exchange.WebServices.dll to make EWS calls. The
- Download the nuget package from [NuGet Gallery | Microsoft.Exchange.WebServices.2.2.0](https://api.nuget.org/v3-flatcontainer/microsoft.exchange.webservices/2.2.0/microsoft.exchange.webservices.2.2.0.nupkg)
- Change the extension of the file from .nupkg to .zip
- Unzip the package.
- Use the dll present at “\lib\net35” location in the package
- Use the dll present at “\lib\40” location in the package
- Provide the path to the DLL for the DLLPath parameter when running the script.

## How To Run
Expand Down Expand Up @@ -203,3 +203,15 @@ If Autodiscover fails due to a redirection error and the above error appears, pr
![Invalid client secret provided screenshot](attachments/CVE-2023-23397_screenshot3.png)

While running the script in Exchange Online, you might see the above error intermittently. Re-running the script should resolve the issue. If it occurs frequently, then remove the Azure application you have created using -DeleteAzureApplication parameter and then recreate it using -CreateAzureApplication parameter.

### "Cannot convert the "Microsoft.Exchange.WebServices.Data.WebCredentials"

![Incorrect WebServices.dll loaded](attachments/CVE-2023-23397_screenshot4.png)

Incorrect link was provided to download Microsoft.Exchange.WebServices.dll originally that is causing this issue. Follow these steps to correct this problem.


- Download the correct [NuGet Gallery | Microsoft.Exchange.WebServices.2.2.0](https://api.nuget.org/v3-flatcontainer/microsoft.exchange.webservices/2.2.0/microsoft.exchange.webservices.2.2.0.nupkg)
- Close PowerShell (**CRITICAL**)
- Launch new PowerShell session
- Run cmdlet again with providing new dll path ( should be `lib\40\Microsoft.Exchange.WebServices.dll`)