CVE-2019-1443: microsoft microsoft sharepoint enterprise server

Vulnerability summary

CVE-2019-1443 is a medium (CVSS 6.5) vulnerability in microsoft microsoft sharepoint enterprise server. EPSS estimates a 5.75% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities.

Timeline

1. 12-11-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes.The security update addresses the vulnerability by correcting how SharePoint checks file content., aka 'Microsoft SharePoint Information Disclosure Vulnerability'.

• CWE-434Unrestricted Upload of File with Dangerous TypeThe product allows the upload or transfer of dangerous file types that are automatically processed within its environment.