U.S. Dept Of Defense · Report #300539
SharePoint exposed web services
Validstatus
mediumseverity
7upvotes
2 Dec 2019disclosed
How it was found
Microsoft SharePoint is a web application platform developed by Microsoft. Because of improper configuration an anonymous user has access to the SharePoint Web Services.
The impact of this vulnerability
The SharePoint Web Services can disclose sensitive information. This information can be used to launch further attacks.
How to fix this vulnerability
Restrict access to this page.
Impact
GET /_vti_bin/lists.asmx?WSDL HTTP/1.1 Cookie: slbPersist=942183690.0.0000; WSS_FullScreenMode=false Host: ███ Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21 Accept: /