Description

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".

Remediation

References

CVE-2018-0864

Related Vulnerabilities

WordPress Plugin Restricted Site Access Security Bypass (7.3.1)

Squid Use After Free Vulnerability (CVE-2023-49288)

YetiForce CRM Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-4092)

MySQL CVE-2019-2455 Vulnerability (CVE-2019-2455)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3541)

Severity

Medium

Classification

CVE-2018-0864 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities