Vulnerabilidade de Divulgação de Informações no Microsoft SharePoint Server

Successful exploitation of CVE-2024-32987 could allow an attacker to gain unauthorized access to sensitive data stored within a SharePoint Server instance. The specific data exposed depends on the SharePoint configuration and permissions, but could include user credentials, internal documents, or other confidential information. This could lead to data breaches, reputational damage, and potential regulatory fines. While the vulnerability description doesn't detail a specific attack vector, the potential for information leakage makes it a significant security concern.

Organizations heavily reliant on Microsoft SharePoint Server for document management and collaboration are at significant risk. Specifically, deployments with weak access controls or those storing sensitive data within SharePoint are particularly vulnerable. Environments that have not been regularly patched or updated are also at increased risk.

• windows / sharepoint:

Get-SPOSite -Limit 1000 | Select-Object URL, Title, Owner

• generic web:

curl -I https://<sharepoint_url>/_layouts/15/settings.php

• generic web:

 grep -i "SharePoint Server" /var/log/apache2/access.log

1. 2024-07-09Disclosure

   disclosure

1. Reservado2024-04-22
2. Publicada2024-07-09
3. Modificada2026-02-10
4. EPSS atualizado2026-04-02

The primary mitigation for CVE-2024-32987 is to upgrade Microsoft SharePoint Server to version 16.0.17328.20424 or later. Before applying the update, it's recommended to review Microsoft's documentation for any potential compatibility issues or breaking changes. Consider testing the update in a non-production environment first. If immediate patching is not possible, review SharePoint permissions and access controls to minimize the potential impact of a successful attack. Implement network segmentation to limit access to SharePoint servers. After the upgrade, verify the fix by attempting to reproduce the vulnerability using known attack patterns (if available) or by reviewing SharePoint logs for any suspicious activity.