CVE-2024-32987: Microsoft SharePoint Server Information Disclosure Vulnerability
Overview
- Severity
- High (CVSS 7.5)
- CVSS Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
- Category
- Information Disclosure
- Exploit Status
- Not Exploited
- Exploitation Likelihood
- Less Likely
- Patch Tuesday
- 2024-Jul
- Released
- 2024-07-09
- Last Updated
- 2024-07-16
- EPSS Score
- 3.74% (percentile: 88.0%)
FAQ
What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is data inside the targeted website like IDs, tokens, cryptographic nonces, and other sensitive information.
Affected Products (3)
Microsoft Office
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
Security Updates (3)
Acknowledgments
<a href="https://twitter.com/_l0gg">khoadha</a> with <a href="https://viettelcybersecurity.com/">vcslab from Viettel Cyber Security</a>
Revision History
- 2024-07-09: Information published.
- 2024-07-16: Added acknowledgements. This is an informational change only.