CVE-2020-1178: High severity microsoft sharepoint enterprise server 2016 vulnerability

Published Jun 9, 2020

Updated

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server, aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'.

Affected Software

4 affected components

Microsoft SharePoint Enterprise Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Microsoft SharePoint Server=2010-sp2

Microsoft SharePoint Server=2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1178

Event History

Jun 9, 2020

CVE Published

via MITRE·07:43 PM

Data Sourced

via MITRE·07:43 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1178?

CVE-2020-1178 is considered a critical elevation of privilege vulnerability.

How do I fix CVE-2020-1178?

To fix CVE-2020-1178, apply the latest security updates provided by Microsoft for affected SharePoint Server versions.

Which versions of SharePoint Server are affected by CVE-2020-1178?

CVE-2020-1178 affects Microsoft SharePoint Server 2010 SP2, 2013 SP1, 2016, and 2019.

Can CVE-2020-1178 be exploited remotely?

Yes, an attacker can exploit CVE-2020-1178 remotely if they can send a specially crafted authentication request to the affected SharePoint server.

What is the impact of CVE-2020-1178 if exploited?

If exploited, CVE-2020-1178 allows an attacker to gain elevated privileges on the affected SharePoint server.