CVE-2018-8578 - An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses

CVE-2018-8578

Summary

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.

References

http://www.securityfocus.com/bid/105832
http://www.securitytracker.com/id/1042133
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8578

Vulnerable Configurations

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:S/C:P/I:N/A:N

refmap via4

bid	105832
confirm	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8578
sectrack	1042133

Last major update

24-08-2020 - 17:37

Published

14-11-2018 - 01:29

Last modified

24-08-2020 - 17:37