CVE-2024-30043HighCVSS 6.5
Microsoft SharePoint Server Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What type of information could be disclosed by this vulnerability? The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content. The scope of file content which could be accessed is dependent on the privileges of compromised user.
🎯 Affected products3
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
✅ Remediation
KB5002598 (Security Update) — fixed build 16.0.5448.1000 KB5002596 (Security Update) — fixed build 16.0.10409.20047 KB5002599 (Security Update) — fixed build 16.0.17328.20292
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30043
- patchhttps://www.microsoft.com/download/details.aspx?familyid=c6668bbd-c1c8-45c4-9a1f-3013d6db3569
- referencehttps://support.microsoft.com/help/5002598
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b2979480-9728-409f-bce4-c2e574dc83ce
- referencehttps://support.microsoft.com/help/5002596
- patchhttps://www.microsoft.com/download/details.aspx?familyid=523339ec-3e36-44d3-a5ea-49d09d535343
- referencehttps://support.microsoft.com/help/5002599