SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated attacker who successfully exploited the vulnerability could hijack the session of another user. To exploit this vulnerability, the attacker could run a specially crafted application. The security update corrects how SharePoint handles session objects to prevent user session hijacking.

N/A

N/A

Microsoft SharePoint 信息泄露漏洞

Microsoft SharePoint是美国微软（Microsoft）公司的一套企业业务协作平台。该平台用于对业务信息进行整合，并能够共享工作、与他人协同工作、组织项目和工作组、搜索人员和信息。 Microsoft SharePoint中处理会话对象的方式存在信息泄露漏洞。攻击者可借助特制的应用程序利用该漏洞劫持其他用户的会话。以下产品及版本受到影响：Microsoft SharePoint Enterprise Server 2016，SharePoint Foundation 2010 SP2，Sh

N/A

N/A