CVE-2023-36890
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-36890 is a newly disclosed vulnerability affecting Microsoft SharePoint Servers. This issue permits an unauthenticated attacker to gain access to sensitive information through specially crafted SharePoint requests. The vulnerability stems from an information disclosure weakness in the way SharePoint handles certain requests, potentially exposing details that are meant to be restricted. Successful exploitation could lead to significant data leaks, including user data and server configurations. Organizations using SharePoint are advised to apply the available patch promptly to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft SharePoint Server
Affected Vendors
- Microsoft
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions