Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server has an authentication flaw that allows attackers to impersonate legitimate users or administrators over a network without proper credentials. This can lead to unauthorized access to sensitive documents and data.

An improper authentication mechanism in Microsoft Office SharePoint (CWE-287) permits network-based spoofing attacks where an attacker can forge or bypass authentication checks to assume the identity of authorized users. This requires network access to the SharePoint instance and can result in unauthorized information disclosure and data manipulation.