CVE-2014-2816: Critical severity microsoft sharepoint foundation 2013 vulnerability
Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka "SharePoint Page Content Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2816?
CVE-2014-2816 has a medium severity rating due to its potential for privilege escalation through a Trojan horse app.
How do I fix CVE-2014-2816?
To remediate CVE-2014-2816, ensure that all security updates for Microsoft SharePoint Server 2013 and SharePoint Foundation 2013 are applied.
Who is affected by CVE-2014-2816?
CVE-2014-2816 affects remote authenticated users of Microsoft SharePoint Server 2013 and SharePoint Foundation 2013.
What is the nature of CVE-2014-2816 vulnerability?
CVE-2014-2816 is a vulnerability that allows privilege escalation through executing custom actions in the SharePoint extensibility model.
Is there a workaround for CVE-2014-2816?
Currently, there are no specific workarounds for CVE-2014-2816 and users should apply the latest patches from Microsoft.