Synopsis
The Microsoft SharePoint Server installation on the remote host is affected by multiple vulnerabilities.
Description
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :
- A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials. An attacker who successfully exploited this vulnerability could perform a phishing attack. The update addresses the vulnerability by ensuring Microsoft Office properly validates URLs. (CVE-2019-1442)
- An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes. The security update addresses the vulnerability by correcting how SharePoint checks file content. (CVE-2019-1443)
- An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the users computer or data. (CVE-2019-1446)
- An information disclosure vulnerability exists in Microsoft SharePoint when an attacker sends a specially crafted API request to the SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could potentially read arbitrary files on the server. The security update addresses the vulnerability by changing how affected APIs process requests. (CVE-2019-1491)
Solution
Microsoft has released the following security updates to address this issue:
-KB4484151
-KB4484165
-KB4484157
-KB4484149
-KB4484159
-KB4484142
-KB4484143
Plugin Details
File Name: smb_nt_ms19_nov_office_sharepoint.nasl
Agent: windows
Supported Sensors: Nessus Agent, Nessus
Risk Information
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:microsoft:sharepoint_server:2010, cpe:/a:microsoft:sharepoint_foundation, cpe:/a:microsoft:sharepoint_server:2019, cpe:/a:microsoft:sharepoint_server:2013, cpe:/a:microsoft:sharepoint_server:2016, cpe:/a:microsoft:office
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 11/12/2019
Vulnerability Publication Date: 11/12/2019
Reference Information
CVE: CVE-2019-1442, CVE-2019-1443, CVE-2019-1446, CVE-2019-1491
IAVA: 2019-A-0420-S, 2020-A-0032-S
MSFT: MS19-4484142, MS19-4484143, MS19-4484149, MS19-4484151, MS19-4484157, MS19-4484159, MS19-4484165
MSKB: 4484142, 4484143, 4484149, 4484151, 4484157, 4484159, 4484165