CVE-2021-31950: 
vulnerability analysis and mitigation

CVE-2021-31950 is a Microsoft SharePoint Server Spoofing Vulnerability that was discovered and disclosed in 2021. The vulnerability affects Microsoft SharePoint Server installations. The initial CVE record was created on April 30, 2021, and Microsoft released security updates to address this vulnerability on June 8, 2021 (MITRE CVE).

The vulnerability has been classified as a spoofing vulnerability in Microsoft SharePoint Server. According to the vulnerability assessment, it received a CVSS score of 6.0, indicating a moderate severity level with the following characteristics: Network Vector (AV:N), Medium Attack Complexity (AC:M), Single Authentication Required (Au:S), Complete Confidentiality Impact (C:C), Partial Integrity Impact (I:P), and No Availability Impact (A:N) (Rapid7).

The vulnerability could allow an attacker to perform spoofing attacks against SharePoint Server installations. The impact includes potential complete confidentiality breach and partial integrity compromise of the affected systems (Rapid7).

The vulnerability requires network access and single authentication for exploitation. The attack complexity is considered medium, suggesting that certain conditions need to be met for successful exploitation (Rapid7).

Microsoft has released security updates to address this vulnerability. For SharePoint Server 2019, the fix is included in KB5001944, and for SharePoint Server 2016, it is included in KB5001946. Organizations are advised to apply these security updates to protect against potential exploitation (Microsoft Support).