Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2020-16941
HistoryOct 16, 2020 - 11:15 p.m.

CVE-2020-16941

2020-10-1623:15:15
microsoft
web.nvd.nist.gov
92
cve-2020-16941
information disclosure
microsoft
sharepoint
server
web pages
folder structure
vulnerability
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0

Percentile

9.5%

JSON

<p>An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page.</p>
<p>To take advantage of the vulnerability, an attacker would require access to the specific SharePoint page affected by this vulnerability.</p>
<p>The security update addresses the vulnerability by correcting how scripts are referenced on some SharePoint pages.</p>

Affected configurations

Nvd
Vulners
Node
microsoftsharepoint_enterprise_serverMatch2016
OR
microsoftsharepoint_foundationMatch2010sp2
OR
microsoftsharepoint_foundationMatch2013sp1
OR
microsoftsharepoint_serverMatch2019
VendorProductVersionCPE
microsoftsharepoint_enterprise_server2016cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
microsoftsharepoint_foundation2010cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*
microsoftsharepoint_foundation2013cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
microsoftsharepoint_server2019cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Foundation 2010 Service Pack 2",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:foundation:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "13.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Foundation 2013 Service Pack 1",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Related

mscve 1
prion 1
nvd 1
cvelist 1
mskb 4
nessus 4
kaspersky 1
mscve
mscve
Microsoft SharePoint Information Disclosure Vulnerability
2020-10-13 07:00:00
prion
prion
Information disclosure
2020-10-16 23:15:00
nvd
nvd
CVE-2020-16941
2020-10-16 23:15:15
cvelist
cvelist
CVE-2020-16941 Microsoft SharePoint Information Disclosure Vulnerability
2020-10-16 22:17:58
mskb
mskb
Description of the security update for SharePoint Foundation 2010: October 13, 2020
2020-10-13 07:00:00
Description of the security update for SharePoint Foundation 2013: October 13, 2020
2020-10-13 07:00:00
Description of the security update for SharePoint Enterprise Server 2016: October 13, 2020
2020-10-13 07:00:00
nessus
nessus
Security Updates for Microsoft SharePoint Server 2010 (October 2020)
2020-10-13 00:00:00
Security Updates for Microsoft SharePoint Server 2016 (October 2020)
2020-10-13 00:00:00
Security Updates for Microsoft SharePoint Server 2013 (October 2020)
2020-10-13 00:00:00
kaspersky
kaspersky
KLA11976 Multiple vulnerabilites in Microsoft Office
2020-10-13 00:00:00

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.1

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.9

Confidence

High

EPSS

0

Percentile

9.5%

JSON
Related for CVE-2020-16941
mscve1prion1nvd1cvelist1mskb4nessus4kaspersky1