Path Traversal in Microsoft Office SharePoint

Executive Summary

This vulnerability is an improper limitation of a pathname to a restricted directory, also known as a 'path traversal' vulnerability, in Microsoft Office SharePoint.

It allows an authorized attacker to execute code over a network by exploiting the way SharePoint handles file paths.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to remote code execution, meaning an attacker with authorized access can run malicious code on the affected system over the network.

This can compromise the confidentiality of data (as indicated by the CVSS score impact on confidentiality), potentially leading to unauthorized data access or manipulation.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows an authorized attacker to execute code remotely on Microsoft Office SharePoint due to improper limitation of a pathname to a restricted directory (path traversal).

Such a remote code execution vulnerability could potentially lead to unauthorized access or manipulation of sensitive data stored within SharePoint environments.

This risk may impact compliance with data protection standards and regulations like GDPR and HIPAA, which require safeguarding sensitive information against unauthorized access and ensuring system integrity.

Useful 0 Not Useful 0