Unrated severityNVD Advisory· Published Oct 16, 2020· Updated Aug 4, 2024
Microsoft SharePoint Information Disclosure Vulnerability
CVE-2020-16942
Description
An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of the vulnerability, an attacker would require access to the specific SharePoint page affected by this vulnerability. The security update addresses the vulnerability by correcting how scripts are referenced on some SharePoint pages.
Affected products
5- cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*Range: 15.0.0
cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:foundation:*:*:*+ 3 more
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:foundation:*:*:*range: 13.0.0
- cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*range: 16.0.0
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*range: 16.0.0
- (no CPE)
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16942mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.