CVE-2020-1025 Microsoft Office Elevation of Privilege Vulnerability
Attackers can bypass authentication and gain improper access by modifying OAuth tokens in SharePoint and Skype for Business servers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-1025?
CVE-2020-1025 is a critical authentication bypass vulnerability in Microsoft Sharepoint Enterprise Server, published on 14 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, an attacker would need to modify the token. The update addresses the vulnerability by modifying how Microsoft SharePoint Server and Skype for Business Server validate tokens.
Weakness: CWE-20
Which versions are affected by CVE-2020-1025?
It affects 5 products.
Products include Microsoft Lync, Microsoft Sharepoint Enterprise Server, Microsoft Sharepoint Foundation, Microsoft Sharepoint Server, Microsoft Skype for Business.
How do I fix CVE-2020-1025?
No fix has been published for CVE-2020-1025 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-1025 being exploited?
There is no known exploitation of CVE-2020-1025 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Sharepoint Enterprise Server
Sources
Also known as GHSA-5xrx-pfvm-p5p8.