CVE-2022-30157HighCVSS 8.8
Microsoft SharePoint Server Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.
How could an attacker exploit this vulnerability? In a network-based attack an attacker would need to have the privileges to create a page on a vulnerable SharePoint server. By creating a site using specific code, the attacker could execute code remotely on the target server.
🎯 Affected products4
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
✅ Remediation
KB5002222 (Security Update) — fixed build 16.0.5332.1001 KB5002167 (Security Update) — fixed build 15.0.5459.1001 KB5002212 (Security Update) — fixed build 16.0.10387.20008 KB5002224 (Security Update) — fixed build 16.0.14931.20418
🔗 References (5)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30157
- patchhttps://www.microsoft.com/download/details.aspx?familyid=5006232d-1dab-4ba4-ba54-d0f4964bdfc2
- patchhttps://www.microsoft.com/download/details.aspx?familyid=aeccc79d-152a-45ef-bfe5-7fc09f57dd5f
- patchhttps://www.microsoft.com/download/details.aspx?familyid=c3794b46-5aac-4655-b553-99227b25b29a
- patchhttps://www.microsoft.com/download/details.aspx?familyid=8c541baa-7b91-472f-a4e6-0fb6a0875d32