Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
BID:99447
Info
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 99447 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-8569 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 11 2017 12:00AM |
| Updated: | Jul 11 2017 12:00AM |
| Credit: | Ashar Javed (@soaj1664ashar),Hyundai AutoEver Europe GmbH |
| Vulnerable: |
Microsoft SharePoint Enterprise Server 2016 0 |
| Not Vulnerable: | |
Discussion
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input.
An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.
Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input.
An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks.
Exploit / POC
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft SharePoint Server CVE-2017-8569 Remote Privilege Escalation Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- CVE-2017-8569 | SharePoint Server XSS Vulnerability (Microsoft)