Microsoft SharePoint Search Scope Information Disclosure Vulnerability

Bugtraq ID:	54314
Class:	Access Validation Error
CVE:	CVE-2012-1860
Remote:	Yes
Local:	No
Published:	Jul 10 2012 12:00AM
Updated:	Jul 10 2012 12:00AM
Credit:	Microsoft
Vulnerable:	Microsoft SharePoint Server 2010 Standard Edition 0 Microsoft SharePoint Server 2010 SP1
Not Vulnerable:

Microsoft SharePoint Search Scope Information Disclosure Vulnerability

Microsoft SharePoint is prone to a remote information-disclosure vulnerability.

Attackers can leverage this issue to tamper with and access information about user search scopes. Information obtained may aid in further attacks.

Microsoft SharePoint Search Scope Information Disclosure Vulnerability

An attacker can exploit this issue through a browser.

Microsoft SharePoint Search Scope Information Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Microsoft SharePoint Search Scope Information Disclosure Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• SharePoint Server Homepage (Microsoft)