Description

SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Microsoft SharePoint Information Disclosure Vulnerability".

Remediation

References

CVE-2018-0864

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0793)

Beego Framework Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2022-31836)

SharePoint CVE-2023-24950 Vulnerability (CVE-2023-24950)

Apache HTTP Server CVE-2012-0031 Vulnerability (CVE-2012-0031)

WordPress Plugin Video Sidebar Widgets Cross-Site Scripting (6.1)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-0864