Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability

Bugtraq ID:	105495
Class:	Input Validation Error
CVE:	CVE-2018-8498
Remote:	Yes
Local:	No
Published:	Oct 09 2018 12:00AM
Updated:	Oct 09 2018 12:00AM
Credit:	Ashar Javed of Hyundai AutoEver Europe GmbH
Vulnerable:	Microsoft SharePoint Enterprise Server 2016 0 Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Not Vulnerable:

Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability

Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input.

An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.

Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2018-8498 | Microsoft SharePoint Elevation of Privilege Vulnerability (Microsoft)