PT-2020-2208 · Microsoft · Sharepoint Server+1

Ivan Vagunin · Published 2020-04-14 · Updated 2020-04-20 · CVE-2020-0920

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description The issue is related to an unlimited file upload vulnerability of a dangerous type. It allows a remote attacker to execute arbitrary code by uploading a specially crafted package. The exploitation requires a user to upload a specially crafted SharePoint application package to an affected version of SharePoint. This could allow an attacker to run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.

Recommendations For Microsoft SharePoint Server, update to a version that includes a fix for this issue. For Microsoft SharePoint Foundation, update to a version that includes a fix for this issue. For Microsoft SharePoint Enterprise Server, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the upload of application packages to minimize the risk of exploitation.

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2020-02123

CVE-2020-0920

Affected Products

Sharepoint Server

Sharepoint Foundation

References · 5

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0920 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0920 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02123 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0920 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0920 · Security Note