MS.SharePoint.RenderWebPartForEdit.Information.Discosure
Description
This indicates an attack attempt to exploit an Information Disclosure Vulnerability in Microsoft Sharepoint Server.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote, authenticated attacker can exploit this via a crafted request, leading to disclosure of sensitive information within the context of the application.
Affected Products
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0974
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |