CVE-2018-0790

published 2018-01-10

CVE-2018-0790: Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due…

high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
microsoft	sharepoint_enterprise_server	—	—
microsoft	sharepoint_enterprise_server	—	—
microsoft	sharepoint_foundation	—	—
microsoft	sharepoint_server	—	—
microsoft_corporation	microsoft_sharepoint	—	—
msrc	microsoft_sharepoint_enterprise_server_2013_service_pack_1	—	—
msrc	microsoft_sharepoint_enterprise_server_2016	—	—
msrc	microsoft_sharepoint_foundation_2010_service_pack_2	—	—