Skip to content
OpenAdvisories
Medium MSRC-CVE-2022-41122 1 CVE

Microsoft SharePoint Server Spoofing Vulnerability

Published Nov 8, 2022 · Updated Nov 8, 2022

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.

Security updates
16.0.5361.1002 — https://support.microsoft.com/kb/5002269
15.0.5485.1000 — https://support.microsoft.com/kb/5002264
15.0.5485.1000 — https://support.microsoft.com/kb/5002267
16.0.10390.20000 — https://support.microsoft.com/kb/5002258
16.0.15601.20052 — https://support.microsoft.com/kb/5002271

Vulnerabilities 1

Revision history

  1. #1

    Information published. This CVE was addressed by updates that were released in September 2022, but the CVE was omitted from the September 2022 Security Updates. This is an informational change only. Customers who have already installed the September 2022 update do not need to take any further action.

References