PT-2020-2213 · Microsoft · Sharepoint Server

Olekmirosh · Published 2020-04-14 · Updated 2020-04-17 · CVE-2020-0974

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description The issue is related to an unrestricted file upload vulnerability, allowing a remote attacker to execute arbitrary code by uploading a specially crafted package. This can be achieved when the software fails to properly check the source markup of an application package. The exploitation requires a user to upload a specially crafted SharePoint application package to an affected version of SharePoint, potentially allowing the attacker to run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.

Recommendations For Microsoft SharePoint Server, update to a version that includes a fix for this issue. For Microsoft SharePoint Enterprise Server, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the upload of application packages to trusted sources until a patch is available. Restrict access to the package upload feature to minimize the risk of exploitation.

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2020-02128

CVE-2020-0974

Affected Products

Sharepoint Server

References · 5

• https://osv.dev/vulnerability/CVE-2020-0974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0974 · Security Note
• https://bdu.fstec.ru/vul/2020-02128 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0974 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0974 · Security Note