SecuritySpace - CVE-2017-11876

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-11876

Description: Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka "Microsoft Project Server Elevation of Privilege Vulnerability".

Test IDs: 1.3.6.1.4.1.25623.1.0.812129 1.3.6.1.4.1.25623.1.0.812205

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-11876
BugTraq ID: 101754
http://www.securityfocus.com/bid/101754
http://www.securitytracker.com/id/1039788
http://www.securitytracker.com/id/1039789

CVE ID:	CVE-2017-11876
Description:	Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to take actions on the web application on behalf of the victim, such as change permissions and delete content, and inject malicious content in the browser of the victim, aka "Microsoft Project Server Elevation of Privilege Vulnerability".
Test IDs:	1.3.6.1.4.1.25623.1.0.812129 1.3.6.1.4.1.25623.1.0.812205
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11876 BugTraq ID: 101754 http://www.securityfocus.com/bid/101754 http://www.securitytracker.com/id/1039788 http://www.securitytracker.com/id/1039789