PT-2013-3049 · Microsoft · Sharepoint Server 2013+1

Published 2013-04-09 · Updated 2018-10-12 · CVE-2013-1290

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013

Description An issue exists where access controls for a SharePoint list are not properly established, allowing remote authenticated users to bypass intended restrictions on reading list items. This is related to the way SharePoint Server enforces access controls on specific SharePoint Lists.

Recommendations For Microsoft SharePoint Server 2013, consider restricting access to sensitive SharePoint lists until a proper fix is applied to ensure default access controls are correctly established. As a temporary workaround, review and manually adjust access controls for affected lists to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-1290

Affected Products

Sharepoint Server 2013

Sharepoint Server

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1290 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-030 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1290 · Security Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-030 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15758 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1290 · Note
• http://us-cert.gov/ncas/alerts/TA13-100A · Note