Kaspersky LabKLA11632KLA11632 An information disclosure vulnerability in Microsoft Office
Detect date:
12/17/2019
Severity:
High
Description:
An information disclosure vulnerability was found in Microsoft SharePoint Server. Malicious users can exploit this vulnerability to obtain sensitive information.
Affected products:
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft SharePoint Foundation 2013 Service Pack 1
Solution:
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories:
Impacts:
OSI
Related products:
KB list:
4484142
4484143
4484157
4484165
Microsoft official advisories:
References
support.microsoft.com/kb/4484142
support.microsoft.com/kb/4484143
support.microsoft.com/kb/4484157
support.microsoft.com/kb/4484165
portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1491
portal.msrc.microsoft.com/en-us/security-guidance
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Microsoft-Sharepoint-Server/
Related
