CVE-2018-8578

EPSS 4.8%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 4.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Nov 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.

Affected products

Microsoft · Microsoft SharePoint

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8578 http://www.securityfocus.com/bid/105832 http://www.securitytracker.com/id/1042133