CVE-2020-1523Microsoft Sharepoint Server 2019 vulnerability

4 documents4 sources
Severity
4.3MEDIUMNVD
CNA8.9
EPSS
1.4%
top 19.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 11
Latest updateMay 24

Description

A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user. The security update addresses the vulnerability by modifying how Microsoft Sh

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

Patches

🔴Vulnerability Details

2
GHSA
GHSA-6vqx-2465-vx69: A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data, aka 'Microsoft SharePoint Server Tampering Vu2022-05-24
CVEList
Microsoft SharePoint Server Tampering Vulnerability2020-09-11

📋Vendor Advisories

1
Microsoft
Microsoft SharePoint Server Tampering Vulnerability2020-09-08
CVE-2020-1523 — Microsoft vulnerability | cvebase