Umbra Wiki cve cve/CVE-2019-0604
Back to wiki

CVE-2019-0604 — Microsoft SharePoint Remote Code Execution Vulnerability

provenance: imported · CVE: CVE-2019-0604 · CWE: CWE-20

CVE-2019-0604: Microsoft SharePoint Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Microsoft
Product SharePoint
Date added 2021-11-03
Due date 2022-05-03
Ransomware campaign use Known

Description

Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-0604

Weakness behind it

CISA records this vulnerability as an instance of CWE-20. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-0604
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →