PT-2020-3961
CVE-2020-1595
·
تاريخ النشر
2020-09-08
·
تاريخ التحديث
2023-12-31
الوصف من
CVSS 3.1
9.9
حرجةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Microsoft SharePoint Server (affected versions not specified)
Microsoft SharePoint Foundation (affected versions not specified)
Microsoft SharePoint Enterprise Server (affected versions not specified)
Description:
A remote code execution issue exists in Microsoft SharePoint due to improper protection of APIs from unsafe data input. This could allow a remote attacker to execute arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation requires accessing a susceptible API on an affected version of SharePoint with specially-formatted input.
Recommendations:
For Microsoft SharePoint Server, update the software to a version that correctly handles deserialization of untrusted data.
For Microsoft SharePoint Foundation, update the software to a version that correctly handles deserialization of untrusted data.
For Microsoft SharePoint Enterprise Server, update the software to a version that correctly handles deserialization of untrusted data.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾