Authenticated spoofing via insufficient credential protection

Insufficiently protected credentials in Microsoft SharePoint server releases allow remote authenticated users to perform spoofing over a network. Microsoft has disclosed the credential-protection weakness and affected builds, but it has not publicly identified which SharePoint component stores, transmits, or validates those credentials without sufficient protection. Reachability requires valid access to a vulnerable SharePoint deployment; published scoring limits the demonstrated consequence to identity spoofing and associated confidentiality exposure rather than code execution or service interruption.