What is CVE-2021-31173?

CVE-2021-31173 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft SharePoint Server Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-31173 cover?

CVE-2021-31173 covers the following CVE IDs: CVE-2021-31173. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-31173?

CVE-2021-31173 has a CVSS v3 base score of 5.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-31173?

CVE-2021-31173 affects 3 products, including: Microsoft SharePoint Enterprise Server 2016; Microsoft SharePoint Foundation 2013 Service Pack 1; Microsoft SharePoint Server 2019.

CVE-2021-31173HighCVSS 5.3

Microsoft SharePoint Server Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 11, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-31173 →

📋 Description

What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).

🎯 Affected products3

Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019

✅ Remediation

KB5001917 (Security Update) — fixed build 16.0.5161.1000 KB5001916 (Security Update) — fixed build 16.0.10374.20000 KB5001935 (Security Update) — fixed build 15.0.5345.1000

🔗 References (4)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31173
patchhttps://www.microsoft.com/download/details.aspx?familyid=650bb002-b472-4d9b-b36e-d960150b2ab7
patchhttps://www.microsoft.com/download/details.aspx?familyid=0036da36-a42a-47e3-855d-9485daf73539
patchhttps://www.microsoft.com/download/details.aspx?familyid=6830da9c-09be-44a0-a565-03638b030d89