SharePoint user enumeration

Description

Microsoft SharePoint is a web application platform developed by Microsoft. Because of improper configuration an Anonymous user can enumerate the SharePoint user accounts by incrementing the ID parameter of userdisp.aspx.

Remediation

Restrict Anonymous Access to this page.

References