CVE-2019-0604—Microsoft SharePoint Remote Code Execution Vulnerability

漏洞名称

Microsoft SharePoint Remote Code Execution Vulnerability

描述

Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2019-0604

相关新闻文章

• Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle EastSeptember 20, 2024
• New BiBi Wiper version also destroys the disk partition tableMay 20, 2024

相关 CWE

• CWE-20