CVEvulnerability

CVE-2018-0790

8.8 HIGH Published 2018-01-10 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-01-10
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789.

Affected configurations

• microsoft sharepoint enterprise server 2013 • microsoft sharepoint enterprise server 2016 • microsoft sharepoint foundation 2010

References

http://www.securityfocus.com/bid/102391 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040150 Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0790 Patch, Vendor Advisory
http://www.securityfocus.com/bid/102391 Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1040150 Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0790 Patch, Vendor Advisory