PT-2022-5781 · Microsoft · Sharepoint Server+1

Published 2022-09-13 · Updated 2023-04-11 · CVE-2022-35823

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)

Description The issue is related to the deserialization of untrusted data, allowing remote attackers to execute arbitrary code and affect the system. This can be exploited by an attacker to run malicious code remotely.

Recommendations For Microsoft SharePoint Server, apply the necessary security updates to fix the deserialization of untrusted data issue. For Microsoft SharePoint Foundation, restrict access to untrusted data until a patch is available. For Microsoft SharePoint Enterprise Server, consider disabling the workflow deserialization feature as a temporary workaround until a fix is released. As a general mitigation measure, restrict access to the system and ensure that only trusted data is processed to minimize the risk of exploitation.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2022-07181

CVE-2022-35823

ZDI-22-1288

Affected Products

Sharepoint Server

Sharepoint Foundation

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-35823 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35823 · Security Note
• https://bdu.fstec.ru/vul/2022-07181 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35823 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35823 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-1288 · Security Note
• https://t.me/cvenotify/36363 · Telegram Post
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35823 · Note