PT-2019-3526

CVE-2019-1330

·

Publicado

2019-10-08

·

Atualizado

2020-08-24

Descrição por

CVSS 3.1
6.5
Média
MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Foundation (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified)
Description The issue is related to insufficient access controls in Microsoft SharePoint, allowing a remote attacker to elevate their privileges. An authenticated attacker can send a specially crafted request to an affected server, enabling the impersonation of another SharePoint user.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾