CVE-2018-0864

Опубликовано: 15 фев. 2018

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".

Ссылки

http://www.securityfocus.com/bid/102962
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040376
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0864
Patch
Vendor Advisory
http://www.securityfocus.com/bid/102962
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040376
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0864
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01094

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-0864

msrc

больше 7 лет назад

Microsoft SharePoint Elevation of Privilege Vulnerability

GHSA-m3xj-hgvj-xq3h