CVE-2020-1102: Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1024.
Other sources
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch KB4484332 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch KB4484336
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this vulnerability?
The attacker must be able to upload a specially crafted SharePoint application package to an affected SharePoint instance. No user interaction is required after the package is uploaded.
What privileges could successful exploitation provide?
Successful exploitation allows arbitrary code execution in the context of the SharePoint application pool and the SharePoint server farm account. This can affect confidentiality, integrity, and availability of the SharePoint environment.
Which SharePoint deployments are identified as affected?
The affected software list includes Microsoft SharePoint Enterprise Server, Microsoft SharePoint Server, SharePoint Server 2019, and SharePoint Enterprise Server 2016. The provided data does not identify specific affected build or patch versions.
What is the available remediation?
Apply the security update that corrects how SharePoint checks the source markup of application packages. If patching cannot occur immediately, prioritize restricting the ability to upload SharePoint application packages to trusted users.