Vulnerabilities may arise if access rights to an Outlook client or data stored within Exchange and Outlook are not created and administered properly. This can occur, for example, if rights exceeding those actually necessary are assigned, enabling unauthorised persons to access confidential information.