CVE-2012-1860
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:N/A:P
AI Score
Confidence
Low
EPSS
Percentile
55.2%
Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka “SharePoint Search Scope Vulnerability.”
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | office_web_apps | 2010 | cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:* |
| microsoft | office_web_apps | 2010 | cpe:2.3:a:microsoft:office_web_apps:2010:sp1:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2007 | cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2007 | cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2007 | cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:*:*:*:*:*:*:* |
| microsoft | sharepoint_server | 2010 | cpe:2.3:a:microsoft:sharepoint_server:2010:sp1:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:N/A:P
AI Score
Confidence
Low
EPSS
Percentile
55.2%