CVE-2019-0957: Input Validation

Published May 16, 2019

Updated

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958.

Affected Software

2 affected components

Microsoft SharePoint Enterprise Server=2016

Microsoft SharePoint Server=2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0957

Event History

May 16, 2019

CVE Published

via MITRE·06:24 PM

Data Sourced

via MITRE·06:24 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0957?

CVE-2019-0957 has a critical severity rating, indicating a significant risk of exploitation.

How do I fix CVE-2019-0957?

To fix CVE-2019-0957, install the security updates provided by Microsoft for affected SharePoint Server versions.

Which versions of Microsoft SharePoint are affected by CVE-2019-0957?

CVE-2019-0957 affects Microsoft SharePoint Enterprise Server 2016 and Microsoft SharePoint Server 2019.

What types of attacks can CVE-2019-0957 facilitate?

CVE-2019-0957 allows elevation of privilege attacks, potentially enabling unauthorized access to sensitive data.

Is user interaction required to exploit CVE-2019-0957?

No, exploitation of CVE-2019-0957 does not require user interaction, making it more critical.