Vulnerability Description
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft Project Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8252.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Project Server | 2010 |
| Microsoft | Sharepoint Foundation | 2013 |
| Microsoft | Sharepoint Server | 2016 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/104325Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041106Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8254PatchVendor Advisory
- http://www.securityfocus.com/bid/104325Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041106Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8254PatchVendor Advisory
FAQ
What is CVE-2018-8254?
CVE-2018-8254 is a vulnerability with a CVSS score of 5.4 (MEDIUM). An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint E...
How severe is CVE-2018-8254?
CVE-2018-8254 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-8254?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Project Server, Microsoft Sharepoint Foundation, Microsoft Sharepoint Server.