MSRC-CVE-2021-24104 — Microsoft SharePoint Server Spoofing Vulnerability

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

Security updates
16.0.5134.1000 — https://support.microsoft.com/kb/4493232
Security Update — https://support.microsoft.com/kb/4493199
16.0.10372.20000 — https://support.microsoft.com/kb/4493230
Security Update — https://support.microsoft.com/kb/4493231
15.0.5327.1000 — https://support.microsoft.com/kb/4493238
Security Update — https://support.microsoft.com/kb/4493177

Vulnerabilities 1

Medium 4.6

CVE-2021-24104

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1

Mar 11, 2021

Revision history

2021-03-09 #1
Information published.

References

CVE-2021-24104 Microsoft SharePoint Server Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-24104
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss