Main Vulnerability Database Vulnerabilities #VU49396

#VU49396 Permissions, Privileges, and Access Controls in Microsoft SharePoint Foundation - CVE-2021-1718

Published: January 12, 2021

Vulnerability identifier: #VU49396

Vulnerability risk: Medium

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2021-1718

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
Microsoft SharePoint Foundation

Software vendor:
Microsoft

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to tampering issue in SharePoint Server, which leads to security restrictions bypass and privilege escalation.

Install updates from vendor's website.