SharePoint URL redirection vulnerability in MS12-050)

Release date:
Updated on:

Affected Systems:
Microsoft Office
Microsoft infopath2010
Microsoft InfoPath 2007 SP2
Microsoft infopath2007
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54315
Cve id: CVE-2012-1862

SharePoint Server is a Server function integration suite that provides comprehensive Content Management and Enterprise Search, accelerating shared business processes and simplifying cross-border information sharing.

The URL redirection vulnerability exists in SharePoint implementation, which can cause spoofing and information leakage and redirect users to external URLs.

<* Source: Microsoft

Link: http://www.microsoft.com/technet/security/bulletin/MS12-050.asp
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Microsoft
---------
Microsoft has released a Security Bulletin (MS12-050) and patches for this:

MS12-050: Vulnerabilities in SharePoint cocould Allow Elevation of Privilege (2695502)

Link: http://www.microsoft.com/technet/security/bulletin/MS12-050.asp