vulnerability

Microsoft CVE-2019-1330: Microsoft SharePoint Elevation of Privilege Vulnerability

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Oct 8, 2019
Added
Oct 8, 2019
Modified
Feb 27, 2023

Description

An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker who successfully exploited this vulnerability could attempt to impersonate another user of the SharePoint server.
To exploit this vulnerability, an authenticated attacker would send a specially crafted request to an affected server, thereby allowing the impersonation of another SharePoint user.
The security update addresses the vulnerability by correcting how Microsoft SharePoint sanitizes user input.

Solution

msft-kb4475608-d3df50d9-1e50-4da3-b893-4f9b15312ed3
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.