Microsoft SharePoint Server Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software? Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).
🎯 Affected products3
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
✅ Remediation
KB5001976 (Security Update) — fixed build 16.0.5188.1000 KB5001981 (Security Update) — fixed build 16.0.5188.1000 KB5001984 (Security Update) — fixed build 15.0.5363.1000 KB5001992 (Security Update) — fixed build 15.0.5363.1000 KB5001996 (Security Update) — fixed build 15.0.5363.1000
🔗 References (13)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34519
- patchhttps://www.microsoft.com/download/details.aspx?familyid=1ba6f08d-2275-4acd-96bd-c7334ce29e3f
- referencehttps://support.microsoft.com/kb/5001976
- referencehttps://support.microsoft.com/help/5001976
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b0bdc5b3-0a57-41d7-b525-fc0c14ab5cf9
- referencehttps://support.microsoft.com/kb/5001981
- patchhttps://www.microsoft.com/download/details.aspx?familyid=30b6fb89-442b-4921-9b28-cd7c6e9793b9
- referencehttps://support.microsoft.com/kb/5001984
- patchhttps://www.microsoft.com/download/details.aspx?familyid=0f7b1092-d203-481b-b22e-b26aa369534e
- referencehttps://support.microsoft.com/kb/5001992
- referencehttps://support.microsoft.com/help/5001992
- patchhttps://www.microsoft.com/download/details.aspx?familyid=717ccbdc-095d-4e1d-8b9c-708b9d6b0401
- referencehttps://support.microsoft.com/kb/5001996