PT-2020-4381 · Microsoft · Sharepoint Server+1
Published
2020-10-13
·
Updated
2023-12-31
·
CVE-2020-16953
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:L/Au:S/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Microsoft SharePoint Server (affected versions not specified)
Microsoft SharePoint Foundation (affected versions not specified)
Microsoft SharePoint Enterprise Server (affected versions not specified)
Description:
An information disclosure issue exists due to improper handling of objects in memory by Microsoft SharePoint Server. This could allow an attacker to obtain information that could further compromise the user's system. To exploit this issue, an attacker would need to log on to an affected system and run a specially crafted application.
Recommendations:
For Microsoft SharePoint Server, update the software to the latest version to address the issue.
For Microsoft SharePoint Foundation, update the software to the latest version to address the issue.
For Microsoft SharePoint Enterprise Server, update the software to the latest version to address the issue.
As a temporary workaround, consider restricting access to sensitive information and implementing additional security measures to minimize the risk of exploitation.
Fix
Out of bounds Read
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sharepoint Server
Sharepoint Foundation