PT-2013-3049 · Microsoft · Sharepoint Server 2013+1

Publicado 2013-04-09 · Atualizado 2018-10-12 · CVE-2013-1290

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013

Description An issue exists where access controls for a SharePoint list are not properly established, allowing remote authenticated users to bypass intended restrictions on reading list items. This is related to the way SharePoint Server enforces access controls on specific SharePoint Lists.

Recommendations For Microsoft SharePoint Server 2013, consider restricting access to sensitive SharePoint lists until a proper fix is applied to ensure default access controls are correctly established. As a temporary workaround, review and manually adjust access controls for affected lists to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1290

Produtos afetados

Sharepoint Server 2013

Sharepoint Server

Referências · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1290 · Nota de Segurança
• http://technet.microsoft.com/en-us/security/bulletin/ms13-030 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15758 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1290 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-030 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1290 · Nota de Segurança
• http://us-cert.gov/ncas/alerts/TA13-100A · Nota