U.S. Dept Of Defense · Report #300540

SharePoint exposed web services

Validstatus

mediumseverity

6upvotes

2 Dec 2019disclosed

How it was found

Microsoft SharePoint is a web application platform developed by Microsoft. Because of improper configuration an anonymous user has access to the SharePoint Web Services.

The impact of this vulnerability

The SharePoint Web Services can disclose sensitive information. This information can be used to launch further attacks.

How to fix this vulnerability

Restrict access to this page.

Impact

https://██████/_vti_bin/lists.asmx?WSDL

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original