Lucene search
SAINT CorporationSAINT:1AF7483E5B4DB373D9449DD910472EA5HistoryMar 03, 2020 - 12:00 a.m.
Microsoft SharePoint Picker.aspx deserialization vulnerability
2020-03-0300:00:00
SAINT Corporation
download.saintcorporation.com
1426
EPSS
0.974
Percentile
100.0%
Added: 03/03/2020
CVE: CVE-2019-0604
BID: 106914
Background
Microsoft SharePoint is a tool for management and automation of business processes, as well as a platform for social networking.
Problem
A deserialization vulnerability in Microsoft SharePoint allows remote attackers to execute arbitrary commands by sending a specially crafted request to the **Picker.aspx** resource.
Resolution
Apply the appropriate update referenced in Microsoft advisory CVE-2019-0604.
References
<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0604>
Platforms
Windows
Related
checkpoint_advisories
checkpoint_advisories
Microsoft SharePoint Remote Code Execution (CVE-2019-0604)
2019-03-20 00:00:00
cisa_kev
cisa_kev
Microsoft SharePoint Remote Code Execution Vulnerability
2021-11-03 00:00:00
hackerone
hackerone
mscve
mscve
Microsoft SharePoint Remote Code Execution Vulnerability
2019-02-12 08:00:00
zdi
zdi
malwarebytes
malwarebytes
A week in security (May 13 – 19)
2019-05-20 15:57:29
thn
thn
threatpost
threatpost
FIN7 Linked to Escalating Active Exploits for Microsoft SharePoint Bug
2019-05-10 21:29:27
U.N. Hack Stemmed From Microsoft SharePoint Flaw
2020-01-30 16:02:58
saint
saint
Microsoft SharePoint Picker.aspx deserialization vulnerability
2020-03-03 00:00:00
Microsoft SharePoint Picker.aspx deserialization vulnerability
2020-03-03 00:00:00
mskb
mskb
zdt
zdt
Microsoft SharePoint - Deserialization Remote Code Execution Exploit
2020-02-11 00:00:00
githubexploit
githubexploit
Exploit for Improper Input Validation in Microsoft
2019-12-10 02:39:57
Exploit for Improper Input Validation in Microsoft
2021-04-22 12:11:22
Exploit for Improper Input Validation in Microsoft
2019-06-26 15:00:29
exploitdb
exploitdb
Microsoft SharePoint - Deserialization Remote Code Execution
2020-01-21 00:00:00
ics
ics
Top 10 Routinely Exploited Vulnerabilities
2020-05-12 12:00:00
Top Routinely Exploited Vulnerabilities
2021-08-20 12:00:00
fireeye
fireeye
UNC215: Spotlight on a Chinese Espionage Campaign in Israel
2021-08-10 15:00:00
symantec
symantec
trendmicroblog
trendmicroblog
prion
prion
Remote code execution
2019-03-05 23:29:00
Remote code execution
2019-03-05 23:29:00
cve
cve
CVE-2019-0594
2019-03-06 00:00:00
CVE-2019-0604
2019-03-06 00:00:00
nvd
nvd
CVE-2019-0604
2019-03-05 23:29:00
CVE-2019-0594
2019-03-05 23:29:00
attackerkb
attackerkb
CVE-2019-0594
2019-03-05 00:00:00
CVE-2019-0604
2019-03-05 00:00:00
mmpc
mmpc
Microsoft investigates Iranian attacks against the Albanian government
2022-09-08 15:00:00
Zerologon is now detected by Microsoft Defender for Identity
2020-11-30 17:00:20
mssecure
mssecure
Ghost in the shell: Investigating web shell attacks
2020-02-04 17:30:40
Microsoft investigates Iranian attacks against the Albanian government
2022-09-08 15:00:00
Zerologon is now detected by Microsoft Defender for Identity
2020-11-30 17:00:20
nessus
nessus
Security Updates for Microsoft Sharepoint Server (March 2019)
2019-03-14 00:00:00
Security Updates for Microsoft Sharepoint Server (February 2019)
2019-02-14 00:00:00
cvelist
cvelist
CVE-2019-0604
2019-03-06 00:00:00
CVE-2019-0594
2019-03-06 00:00:00
krebs
krebs
Microsoft Patch Tuesday, Sept. 2020 Edition
2020-09-08 21:33:26
securelist
securelist
APT trends report Q2 2019
2019-08-01 10:00:05
Incident Response Analyst Report 2019
2020-08-06 10:00:34
qualysblog
qualysblog
Unpacking the CVEs in the FireEye Breach – Start Here First
2021-02-01 20:40:25
Qualys Security Advisory: SolarWinds / FireEye
2020-12-22 21:17:31
kaspersky
kaspersky
KLA11417 Multiple vulnerabilities in Microsoft Office
2019-02-12 00:00:00
talosblog
talosblog