The vulnerability of the Microsoft SharePoint Server software, the Microsoft Lync Server and Skype for Business Server messaging applications is related to errors in token verification by Oauth. This vulnerability allows attackers to escalate their privileges.

🗓️ 17 Jul 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

SharePoint, Lync, and Skype for Business token verification errors allow privilege escalation.

Reporter	Title	Published	Views	Family All 23
Information Security Automation	Microsoft Patch Tuesday July 2020: my new open source project Vulristics, DNS SIGRed, RDP Client and SharePoint	2 Aug 202004:05	–	avleonov
CVE	CVE-2020-1025	14 Jul 202022:53	–	cve
Cvelist	CVE-2020-1025 Microsoft Office Elevation of Privilege Vulnerability	14 Jul 202022:53	–	cvelist
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020	14 Jul 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: July 14, 2020	14 Jul 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: July 14, 2020	14 Jul 202007:00	–	mskb
Microsoft KB	Description of the security update for Skype for Business Server 2019 CU 2: July 14, 2020	14 Jul 202007:00	–	mskb
Microsoft KB	Description of the security update for Skype for Business Server 2015 CU 8: July 14, 2020	14 Jul 202007:00	–	mskb
Microsoft KB	Microsoft Teams help & learning	14 Jul 202007:00	–	mskb
Kaspersky	KLA11864 Multiple vulnerabilities in Microsoft Office	14 Jul 202000:00	–	kaspersky

Vulners

Node

microsoft microsoft_lync_serverMatch2013

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1025
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2020071415
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-1025
web	www.web.nvd.nist.gov/view/vuln/detail

17 Jul 2020 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 26.8

CVSS 37.8

EPSS0.05853

sharepoint vulnerability lync vulnerability skype vulnerability token verification errors privilege escalation