An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The security update addresses the vulnerability by correcting how SharePoint checks file content., aka 'Microsoft SharePoint Information Disclosure Vulnerability'.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Sharepoint | — | Download and install Microsoft KB4484142Download and install Microsoft KB4484143 | May 15, 2023 | Nov 12, 2019 |
| Msft | — | Security Update for Microsoft SharePoint Foundation 2013 (KB4484157)Security Update for Microsoft SharePoint Foundation 2010 (KB4484165) | Nov 12, 2019 | Nov 12, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub