PT-2020-4799 · Microsoft · Sharepoint Server+1

Hph0Var + 1 · Published 2020-11-10 · Updated 2023-12-31 · CVE-2020-17016

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified)

Description: The issue is related to insufficient input validation in Microsoft SharePoint Server packages, including Microsoft SharePoint Enterprise Server. This can be exploited by a remote attacker to execute arbitrary code. The vulnerability affects the system, allowing attackers to have an impact.

Recommendations: For Microsoft SharePoint Server, update to a version that includes the fix for this issue. For Microsoft SharePoint Enterprise Server, apply the necessary security patches to resolve the vulnerability. For Microsoft SharePoint Foundation, consider restricting access to sensitive areas of the system until a patch is available. As a temporary workaround, consider disabling any modules or functions that rely on external input validation until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-05351

CVE-2020-17016

Affected Products

Sharepoint Server

Sharepoint Foundation

References · 7

• https://bdu.fstec.ru/vul/2020-05351 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-17016 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17016 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17016 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17016 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-17016 · Vendor Advisory
• https://t.me/cvenotify/5532 · Telegram Post