CVE-2020-1025

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Skype for Business Server (affected versions not specified)

Description An elevation of privilege issue occurs when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. This could allow an attacker to bypass authentication and achieve improper access by modifying the token.

Recommendations For Microsoft SharePoint Server, update the software to modify how tokens are validated. For Skype for Business Server, update the software to modify how tokens are validated. As a temporary workaround, consider restricting access to the OAuth token validation mechanism until a patch is available.