Microsoft SharePoint Server CVE-2014-4116 Remote Privilege Escalation Vulnerability

Bugtraq ID:	70980
Class:	Unknown
CVE:	CVE-2014-4116
Remote:	Yes
Local:	No
Published:	Nov 11 2014 12:00AM
Updated:	Nov 11 2014 12:00AM
Credit:	Drew Calcott of EY
Vulnerable:
Not Vulnerable:

Microsoft SharePoint Server CVE-2014-4116 Remote Privilege Escalation Vulnerability

Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability.

An attacker can exploit this issue to execute arbitrary code with elevated privileges in the context of the currently logged-in user. Successful exploits may aid in further attacks.

Microsoft SharePoint Server CVE-2014-4116 Remote Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft SharePoint Server CVE-2014-4116 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Microsoft SharePoint Server 2010 SP2

• Microsoft Security Update for Microsoft SharePoint Foundation 2010 (KB2889838)
  http://www.microsoft.com/downloads/details.aspx?familyid=72bad51b-fa75 -41ec-8e9c-3607370bca88

Microsoft SharePoint Server CVE-2014-4116 Remote Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)