What is CVE-2021-27052?

CVE-2021-27052 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft SharePoint Server Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-27052 cover?

CVE-2021-27052 covers the following CVE IDs: CVE-2021-27052. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-27052?

CVE-2021-27052 has a CVSS v3 base score of 5.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-27052?

CVE-2021-27052 affects 2 products, including: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Server 2019.

CVE-2021-27052HighCVSS 5.3

Microsoft SharePoint Server Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

March 9, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-27052 →

📋 Description

What type of information could be disclosed by this vulnerability? An attacker could possibly gain access to an organizational's email, sites, filenames, or the URLs of files.

🎯 Affected products2

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019

✅ Remediation

KB4493232 (Security Update) — fixed build 16.0.5134.1000 KB4493230 (Security Update) — fixed build 16.0.10372.20000

🔗 References (6)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27052
patchhttps://www.microsoft.com/download/details.aspx?familyid=35544dda-5748-488f-ba0a-3cb0598bd49c
referencehttps://support.microsoft.com/kb/4493232
patchhttps://www.microsoft.com/download/details.aspx?familyid=93aae8bc-8253-4df6-a1cf-7554eb0f8eda
referencehttps://support.microsoft.com/kb/4493230
referencehttps://support.microsoft.com/help/4493230