SharePoint user enumeration

Description
  • Microsoft SharePoint is a web application platform developed by Microsoft. Because of improper configuration an Anonymous user can enumerate the SharePoint user accounts by incrementing the ID parameter of userdisp.aspx.
Remediation
  • Restrict Anonymous Access to this page.
References