I get some error 401.

[IMnewer]

I can login EWS from browser, but failed with same username and password in this exp.
I get 401 error. Why?

Microsoft.Exchange.WebServices.Data.ServiceRequestException: The request failed. The remote server returned an error: (401) Unauthorized. --
-> System.Net.WebException: The remote server returned an error: (401) Unauthorized.
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.Exchange.WebServices.Data.EwsHttpWebRequest.Microsoft.Exchange.WebServices.Data.IEwsHttpWebRequest.GetResponse()
at Microsoft.Exchange.WebServices.Data.ServiceRequestBase.GetEwsHttpWebResponse(IEwsHttpWebRequest request)
--- End of inner exception stack trace ---
at Microsoft.Exchange.WebServices.Data.ServiceRequestBase.GetEwsHttpWebResponse(IEwsHttpWebRequest request)
at Microsoft.Exchange.WebServices.Data.ServiceRequestBase.ValidateAndEmitRequest(IEwsHttpWebRequest& request)
at Microsoft.Exchange.WebServices.Data.SimpleServiceRequestBase.InternalExecute()
at Microsoft.Exchange.WebServices.Data.MultiResponseServiceRequest`1.Execute()
at Microsoft.Exchange.WebServices.Data.ExchangeService.BindToFolder(FolderId folderId, PropertySet propertySet)
at Microsoft.Exchange.WebServices.Data.ExchangeService.BindToFolder[TFolder](FolderId folderId, PropertySet propertySet)
at Microsoft.Exchange.WebServices.Data.Folder.Bind(ExchangeService service, WellKnownFolderName name)
at Zcg.Exploit.Remote.Exchange.Exchange2010AutoTag.Main(String[] args)

[zcgonvh]

Does password contains a caret(^) or quote (“‘)? Ensure all of them escaped or quoted.

[IMnewer]

NO, just letter and number.
Note that I can login EWS/exchange.asmx from browser, I don't know why.

[IMnewer]

Maybe it's related with authentication method of server.

[IMnewer]

Hello, which version this exp affects? Just Exchange 2010 SP3 CU30?

[zcgonvh]

all version

…

------------------ Original ------------------ From: Gitzzl <notifications@github.com&gt; Date: Fri,Dec 11,2020 8:59 AM To: zcgonvh/CVE-2020-17144 <CVE-2020-17144@noreply.github.com&gt; Cc: zcgonvh <zcgonvh@qq.com&gt;, Comment <comment@noreply.github.com&gt; Subject: Re: [zcgonvh/CVE-2020-17144] I get some error 401. (#1)