CVE-2018-0789: Critical severity microsoft sharepoint enterprise server 2016 vulnerability

Published Jan 10, 2018

Updated

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0790.

Affected Software

3 affected components

Microsoft SharePoint Enterprise Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Microsoft SharePoint Server=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0789

Event History

Jan 10, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0789?

CVE-2018-0789 has a severity rating of Important, indicating a significant risk of elevation of privilege.

How do I fix CVE-2018-0789?

To fix CVE-2018-0789, apply the latest security updates provided by Microsoft for affected SharePoint software versions.

Which products are affected by CVE-2018-0789?

CVE-2018-0789 affects Microsoft SharePoint Foundation 2010, SharePoint Server 2013, and SharePoint Server 2016.

What type of vulnerability is CVE-2018-0789?

CVE-2018-0789 is classified as an elevation of privilege vulnerability affecting SharePoint.

Can CVE-2018-0789 be exploited remotely?

Yes, CVE-2018-0789 can potentially be exploited remotely if an attacker has the ability to send crafted web requests.