The vulnerability of Microsoft SharePoint Server packages, related to the lack of integrity checks, allows attackers to gain unauthorized access to protected information.

🗓️ 13 Dec 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

SharePoint Server updates lack integrity checks, enabling remote attackers to replace download content and access protected data.

Reporter	Title	Published	Views	Family All 23
CNNVD	Microsoft Office Sharepoint Server 信息泄露漏洞	13 Jul 202100:00	–	cnnvd
CVE	CVE-2021-34519	14 Jul 202117:54	–	cve
Cvelist	CVE-2021-34519 Microsoft SharePoint Server Information Disclosure Vulnerability	14 Jul 202117:54	–	cvelist
EUVD	EUVD-2021-21173	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: July 13, 2021 (KB5001976)	13 Jul 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: July 13, 2021 (KB5001981)	13 Jul 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: July 13, 2021 (KB5001984)	13 Jul 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: July 13, 2021 (KB5001992)	13 Jul 202107:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: July 13, 2021 (KB5001996)	13 Jul 202107:00	–	mskb
Kaspersky	KLA12220 Multiple vulnerabilities in Microsoft Office	13 Jul 202100:00	–	kaspersky

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-830/
msrc	www.msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34519
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021071338
web	www.web.nvd.nist.gov/view/vuln/detail
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-830/

13 Dec 2021 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 26.3

CVSS 36.5

EPSS0.01945

SharePoint Server Integrity checks Remote attacker Content replacement Protected information