CVE-2018-0790: High severity microsoft sharepoint enterprise server 2016 vulnerability

Published Jan 10, 2018

Updated

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789.

Affected Software

3 affected components

Microsoft SharePoint Enterprise Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Microsoft SharePoint Foundation=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0790

Event History

Jan 10, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0790?

CVE-2018-0790 has a severity rating of important for the affected versions of Microsoft SharePoint.

How do I fix CVE-2018-0790?

To fix CVE-2018-0790, apply the security update provided by Microsoft for the respective SharePoint version.

Which SharePoint versions are affected by CVE-2018-0790?

CVE-2018-0790 affects Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2013 SP1, and SharePoint Server 2016.

What type of vulnerability is CVE-2018-0790?

CVE-2018-0790 is an elevation of privilege vulnerability that occurs due to improper handling of web requests.

Can CVE-2018-0790 lead to unauthorized access?

Yes, CVE-2018-0790 can allow an attacker to gain elevated privileges within the SharePoint environment.