Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability

Bugtraq ID:	100725
Class:	Input Validation Error
CVE:	CVE-2017-8629
Remote:	Yes
Local:	No
Published:	Sep 12 2017 12:00AM
Updated:	Sep 12 2017 12:00AM
Credit:	Jayson Grace
Vulnerable:	Microsoft SharePoint Server 2013 SP1
Not Vulnerable:

Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability

Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input.

An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.

Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2017-8629 | Microsoft SharePoint XSS Vulnerability (Microsoft)