MSRC-CVE-2024-30043 — Microsoft SharePoint Server Information Disclosure Vulnerability

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What type of information could be disclosed by this vulnerability?
The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content. The scope of file content which could be accessed is dependent on the privileges of compromised user.

Security updates
16.0.5448.1000 — https://support.microsoft.com/help/5002598
16.0.10409.20047 — https://support.microsoft.com/help/5002596
16.0.17328.20292 — https://support.microsoft.com/help/5002599

Vulnerabilities 1

Medium 6.5

CVE-2024-30043 Public exploit EPSS 56%

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

May 14, 2024

Revision history

2024-05-14 #1
Information published.

References

CVE-2024-30043 Microsoft SharePoint Server Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30043
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss