CVE-2024-32987HighCVSS 7.5
Microsoft SharePoint Server Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is data inside the targeted website like IDs, tokens, cryptographic nonces, and other sensitive information.
🎯 Affected products3
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
✅ Remediation
KB5002618 (Security Update) — fixed build 16.0.5456.1000 KB5002615 (Security Update) — fixed build 16.0.10412.20001 KB5002606 (Security Update) — fixed build 16.0.17328.20424
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32987
- patchhttps://www.microsoft.com/download/details.aspx?familyid=92f58fc5-c39d-4a25-bea5-ddee233c734c
- referencehttps://support.microsoft.com/help/5002618
- patchhttps://www.microsoft.com/download/details.aspx?familyid=a981cd4e-a4a7-4b75-85c3-6708c75ec97e
- referencehttps://support.microsoft.com/help/5002615
- patchhttps://www.microsoft.com/download/details.aspx?familyid=79a55ec9-bad3-44c2-bd0e-843f637f43a7
- referencehttps://support.microsoft.com/help/5002606