Login Request a demo
Unscored severity · published Dec 10, 2008
CVE-2008-4032
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which…
–
CVSS
47.9%
EPSS
No
On KEV
Description
Microsoft Office SharePoint Server 2007 Gold and SP1 and Microsoft Search Server 2008 do not properly perform authentication and authorization for administrative functions, which allows remote attackers to cause a denial of service (server load), obtain sensitive information, and "create scripts that would run in the context of the site" via requests to administrative URIs, aka "Access Control Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)47.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Office Sharepoint Server · Microsoft
2007; 2007; 2007; 2007 · source: NVD
SS
Search Server · Microsoft
2008; 2008 · source: NVD
Affected product
OS
Office Sharepoint Server
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4032
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4032
secunia.com
http://secunia.com/advisories/33063
www.securitytracker.com
http://www.securitytracker.com/id?1021367
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA08-344A.html
www.vupen.com
http://www.vupen.com/english/advisories/2008/3389
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-077
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5774
More from Office Sharepoint Server
7.8
CVE-2009-0557
Microsoft Office Object Record Corruption Vulnerability
7.8
CVE-2010-0258
Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office…
–
CVE-2015-2558
Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Excel Viewer,…
–
CVE-2012-1863
Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1…
–
CVE-2010-0264
Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote…