Intrusion PreventionMS.SharePoint.CVE-2019-1443.Information.Disclosure
Description
This indicates an attack attempt to exploit am Information Disclosure Vulnerability in Microsoft Sharepoint Server.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote, authenticated attacker can exploit this via a crafted request, leading to disclosure of NTLM hashes.
Affected Products
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2010
Microsoft SharePoint Foundation 2013
Microsoft Sharepoint Server 2010
Microsoft Sharepoint Server 2013
Microsoft Sharepoint Server 2019
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1443
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48664 |
| Created | Jan 20, 2020 |
| Updated | May 02, 2022 |
| Risk |
|
| CVE ID | CVE-2019-1443 |
| Exploit Prediction Score | 94.43% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |