CVE-2020-16951: Microsoft SharePoint Remote Code Execution Vulnerability

Overview

Severity

High (CVSS 8.6)

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L/E:P/RL:O/RC:C

Category

Remote Code Execution

Exploit Status

Not Exploited

Exploitation Likelihood

Less Likely

Patch Tuesday

2020-Oct

Released

2020-10-13

Last Updated

2020-11-19

EPSS Score

1.75% (percentile: 82.6%)

Description

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account. Exploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint. The security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.

Affected Products (3)

Other

• 10950
• 11585
• 10612

Security Updates (3)

• 4486677
• 4486676
• 4486694

Acknowledgments

<a href="https://srcincite.io/">Steven Seeley (mr_me) </a>, <a href="https://twitter.com/ivagunin">Ivan Vagunin</a>

Revision History

• 2020-10-13: Information published.
• 2020-11-19: Added an acknowledgement. This is an informational change only.