ID CVE-2020-16948
Summary An information disclosure vulnerability exists when Microsoft SharePoint Server fails to properly handle objects in memory, aka 'Microsoft SharePoint Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-16941, CVE-2020-16942, CVE-2020-16950, CVE-2020-16953.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 20-10-2020 - 19:17)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:N/A:N
Last major update 20-10-2020 - 19:17
Published 16-10-2020 - 23:15
Last modified 20-10-2020 - 19:17
Back to Top