CVE-2020-1440— Microsoft SharePoint 输入验证错误漏洞

Microsoft SharePoint Server Tampering Vulnerability

<p>A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data.</p> <p>To exploit the vulnerability, an attacker would need to be authenticated on an affected SharePoint Server. The attacker would then need to send a specially modified request to the server, targeting a specific user.</p> <p>The security update addresses the vulnerability by modifying how Microsoft SharePoint Server handles profile data.</p>

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

N/A

Microsoft SharePoint 输入验证错误漏洞

Microsoft SharePoint是美国微软（Microsoft）公司的一套企业业务协作平台。该平台用于对业务信息进行整合，并能够共享工作、与他人协同工作、组织项目和工作组、搜索人员和信息。 Microsoft SharePoint Server 存在输入验证错误漏洞，该漏洞源于无法正确处理配置文件数据，该漏洞允许攻击者通过修改目标用户的配置文件数据，发送自定义数据请求。以下产品及版本受到影响： Microsoft SharePoint Enterprise Server 2016版本， Micro

N/A

N/A