PT-2019-3526 · Microsoft · Sharepoint Server+1

Ashar Javed · Publicado 2019-10-08 · Atualizado 2020-08-24 · CVE-2019-1330

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description The issue is related to insufficient access controls in Microsoft SharePoint, allowing a remote attacker to elevate their privileges. An authenticated attacker can send a specially crafted request to an affected server, enabling the impersonation of another SharePoint user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BDU:2019-03703

CVE-2019-1330

Produtos afetados

Sharepoint Server

Sharepoint Foundation

Referências · 5

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1330 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-03703 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1330 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1330 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1330 · Nota de Segurança