Information disclosure

2018-12-1200:29:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks (a variant of cross-site request forgery, CSRF), aka “Microsoft SharePoint Information Disclosure Vulnerability.” This affects Microsoft SharePoint.

CPENameOperatorVersion
sharepoint_servereq2013 sp1
sharepoint_servereq2016
sharepoint_servereq2010 sp2

Name	Operator	Version
sharepoint_server	eq	2013 sp1
sharepoint_server	eq	2016
sharepoint_server	eq	2010 sp2

References

www.securityfocus.com/bid/106096

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8580