PT-2018-9112 · Microsoft · Sharepoint Enterprise Server 2016+2

Ashar Javed · Publicado 2018-02-13 · Atualizado 2018-03-14 · CVE-2018-0864

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SharePoint Project Server 2013 SharePoint Enterprise Server 2016

Description: The issue is related to how web requests are handled, allowing an information disclosure. An elevation of privilege vulnerability exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. An authenticated attacker could exploit this by sending a specially crafted request, potentially leading to cross-site scripting attacks. This could allow the attacker to read unauthorized content, use the victim's identity to take actions on the SharePoint site, and inject malicious content into the user's browser.

Recommendations: For SharePoint Project Server 2013, update to a version that properly sanitizes web requests to prevent elevation of privilege. For SharePoint Enterprise Server 2016, ensure that all web requests are properly sanitized to prevent cross-site scripting attacks and elevation of privilege. As a temporary workaround, consider restricting access to sensitive areas of the SharePoint site to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-0864

Produtos afetados

Sharepoint Enterprise Server 2016

Sharepoint Project Server 2013

Sharepoint Server

Referências · 6

• http://securitytracker.com/id/1040376 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0864 · Aviso do Fabricante
• http://securityfocus.com/bid/102962 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0864 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0864 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0864 · Nota de Segurança