Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
What privileges could be gained by an attacker who successfully exploited the vulnerability? Successful exploitation could allow a user with read-only access to the SharePoint Holds list to schedule hold-processing operations normally restricted to users who manage holds, changing the compliance state of documents.
<a href="https://www.linkedin.com/in/supawee-foitong/">Supawee Foitong</a>