Security Updates for Microsoft SharePoint Server (November 2019)

high Nessus Plugin ID 130914

Synopsis

The Microsoft SharePoint Server installation on the remote host is affected by multiple vulnerabilities.

Description

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

- A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials. An attacker who successfully exploited this vulnerability could perform a phishing attack. The update addresses the vulnerability by ensuring Microsoft Office properly validates URLs. (CVE-2019-1442)

- An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could potentially leverage SharePoint functionality to obtain SMB hashes. The security update addresses the vulnerability by correcting how SharePoint checks file content. (CVE-2019-1443)

- An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the users computer or data. (CVE-2019-1446)

- An information disclosure vulnerability exists in Microsoft SharePoint when an attacker sends a specially crafted API request to the SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could potentially read arbitrary files on the server. The security update addresses the vulnerability by changing how affected APIs process requests. (CVE-2019-1491)

Solution

Microsoft has released the following security updates to address this issue:
-KB4484151
-KB4484165
-KB4484157
-KB4484149
-KB4484159
-KB4484142
-KB4484143

See Also

http://www.nessus.org/u?30239d3e

http://www.nessus.org/u?0fd61f92

http://www.nessus.org/u?7c4a9439

http://www.nessus.org/u?0c15982d

http://www.nessus.org/u?5fe30ea9

http://www.nessus.org/u?dbccec34

http://www.nessus.org/u?9013241d

Plugin Details

Severity: High

ID: 130914

File Name: smb_nt_ms19_nov_office_sharepoint.nasl

Version: 1.10

Type: local

Agent: windows

Published: 11/12/2019

Updated: 2/19/2021

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: E:U/RL:OF/RC:C

CVSS Score Source: CVE-2019-1491

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:sharepoint_foundation, cpe:/a:microsoft:sharepoint_server, cpe:/a:microsoft:office

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 11/12/2019

Vulnerability Publication Date: 11/12/2019

Reference Information

CVE: CVE-2019-1442, CVE-2019-1443, CVE-2019-1446, CVE-2019-1491

MSKB: 4484151, 4484165, 4484157, 4484149, 4484159, 4484142, 4484143

MSFT: MS19-4484151, MS19-4484165, MS19-4484157, MS19-4484149, MS19-4484159, MS19-4484142, MS19-4484143

IAVA: 2019-A-0420-S, 2020-A-0032-S