New Search

Microsoft Project Server Elevation of Privilege Vulnerability – CVE-2017-11876

oval:org.cisecurity:def:3650

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read use the victim's identity to take actions on the web application on behalf of the victim such as change permissions and delete content and inject malicious content in the browser of the victim aka "Microsoft Project Server Elevation of Privilege Vulnerability".

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows 7
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2016
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2008 R2
  • Microsoft Windows 10
Class:
vulnerability
Reference(s):
  • CVE-2017-11876
Product(s):
  • Microsoft SharePoint Enterprise Server 2016
  • Microsoft Project Server 2013