|
|
|
|
| |
| A vulnerability in the way Microsoft's SharePoint Portal and Team Services works, allows remote attackers to bypass the authentication mechanism, by disabling the JavaScript support when viewing that page (or restricting access to the password protected area). Disabling JavaScript doesn't not affect the ability to control the products. |
| |
Credit:
The information has been provided by arkanian.
|
| |
There is a bug in how the authentication works with the web-based administration page. This page resides, in the web servers with SharePoint, in http://www.example.com/_layouts/settings.htm or http://www.example.com/some_directory/_layouts/settings.htm.
This page is usually protected by NT Basic or NTLM authentication via a JavaScript request to a protected area.
The trick to see this page consist in modifying the IE security slidebar, in Security tab, to HIGH, or by disabling JavaScript. The process is as follow:
- Check Security: Tools -> Options -> Security -> Security Medium
- Browse to /_layouts/settings.htm page.
- NT Basic or NTLM Window is shown
- Click on Cancel -> You see "You are not authorized to view this page"
- Change Security to HIGH and press F5 for refresh
- The page is shown with some error and incomplete, but we don't need user or password to see it and some links are fully functional
|
|
|
|
|
|
|
