First published: Mon Aug 17 2020(Updated: )
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1499, CVE-2020-1500.
Credit: secure@microsoft.com secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
=2016 | ||
=2013-sp1 | ||
=2010-sp2 | ||
=2019 | ||
Microsoft SharePoint Enterprise Server | =2016 | |
Microsoft SharePoint Foundation | =2013-sp1 | |
Microsoft SharePoint Server | =2010-sp2 | |
Microsoft SharePoint Server | =2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-1501 has a severity rating of Important.
CVE-2020-1501 allows an attacker to perform spoofing attacks by sending specially crafted web requests to affected SharePoint servers.
To mitigate CVE-2020-1501, apply the latest security updates provided by Microsoft for the affected SharePoint versions.
CVE-2020-1501 affects Microsoft SharePoint Server 2010 SP2, 2013 SP1, 2016, and 2019.
Yes, CVE-2020-1501 is a remote spoofing vulnerability that can be exploited over the network.