Description (CNA)
A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net web controls, aka 'Microsoft SharePoint Server Remote Code Execution Vulnerability'.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Microsoft SharePoint Enterprise Server | affected 2016 |
| Microsoft / Microsoft SharePoint Server | affected 2019 |
| Microsoft / Microsoft SharePoint Foundation | affected 2010 Service Pack 2; affected 2013 Service Pack 1 |
CWE
No CWE identifiers supplied.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1181
- https://www.zerodayinitiative.com/advisories/ZDI-20-694/
ADP enrichment
No English description supplied.