What is CVE-2020-16979?

CVE-2020-16979 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft SharePoint Information Disclosure Vulnerability

Which CVE IDs does CVE-2020-16979 cover?

CVE-2020-16979 covers the following CVE IDs: CVE-2020-16979. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2020-16979?

CVE-2020-16979 has a CVSS v3 base score of 5.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2020-16979?

CVE-2020-16979 affects 3 products, including: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Foundation 2013 Service Pack 1; Microsoft SharePoint Server 2019.

CVE-2020-16979HighCVSS 5.3

Microsoft SharePoint Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

November 10, 2020

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2020-16979 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.

🎯 Affected products3

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019

✅ Remediation

KB4486717 (Security Update) KB4486714 (Security Update) KB4486733 (Security Update)

🔗 References (6)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-16979
patchhttps://www.microsoft.com/download/details.aspx?familyid=9a9c9608-da2b-47c6-90f6-20ef0bf01896
referencehttps://support.microsoft.com/help/4486717
patchhttps://www.microsoft.com/download/details.aspx?familyid=466c8e2f-7b95-4a9a-94a7-17ee57f8d01e
referencehttps://support.microsoft.com/help/4486714
patchhttps://www.microsoft.com/download/details.aspx?familyid=53ca5d28-e62f-4adf-8232-01c523626d2f