CVE-2019-0956: Medium severity microsoft sharepoint enterprise server 2016 vulnerability
An information disclosure vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Server Information Disclosure Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0956?
CVE-2019-0956 has a critical severity rating as it allows information disclosure in affected SharePoint servers.
How do I fix CVE-2019-0956?
To fix CVE-2019-0956, you should apply the latest security updates provided by Microsoft for your specific SharePoint version.
Which versions of SharePoint are affected by CVE-2019-0956?
CVE-2019-0956 affects Microsoft SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1.
What kind of information can be disclosed due to CVE-2019-0956?
Due to CVE-2019-0956, an attacker could potentially gain access to sensitive information that should be protected on the affected SharePoint server.
Is there a workaround for CVE-2019-0956?
Microsoft does not recommend a specific workaround for CVE-2019-0956, and applying security updates is the advised course of action.