Microsoft SharePoint Server CVE-2018-0864 Remote Privilege Escalation Vulnerability

Bugtraq ID:	102962
Class:	Input Validation Error
CVE:	CVE-2018-0864
Remote:	Yes
Local:	No
Published:	Feb 13 2018 12:00AM
Updated:	Feb 13 2018 12:00AM
Credit:	Ashar Javed of Hyundai AutoEver Europe GmbH.
Vulnerable:	Microsoft SharePoint Enterprise Server 2016 0 Microsoft Project Server 2013 Service Pack 1
Not Vulnerable:

Microsoft SharePoint Server CVE-2018-0864 Remote Privilege Escalation Vulnerability

Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input.

An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.

Microsoft SharePoint Server CVE-2018-0864 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft SharePoint Server CVE-2018-0864 Remote Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2018-0864 | Microsoft SharePoint Elevation of Privilege Vulnerability (Microsoft)