Microsoft SharePoint CVE-2017-11936 Privilege Escalation Vulnerability

Bugtraq ID:	102068
Class:	Unknown
CVE:	CVE-2017-11936
Remote:	Yes
Local:	No
Published:	Dec 12 2017 12:00AM
Updated:	Dec 19 2017 10:38PM
Credit:	Ashar Javed of Hyundai AutoEver Europe GmbH.
Vulnerable:	Microsoft SharePoint Enterprise Server 2016 0
Not Vulnerable:

Microsoft SharePoint CVE-2017-11936 Privilege Escalation Vulnerability

Microsoft SharePoint is prone to a privilege-escalation vulnerability.

An attackers may exploit this issue to gain elevated privileges.

Microsoft SharePoint CVE-2017-11936 Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft SharePoint CVE-2017-11936 Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft SharePoint CVE-2017-11936 Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Office Homepage (Microsoft)
  
• CVE-2017-11936 | Microsoft SharePoint Elevation of Privilege Vulnerability (Microsoft)