Microsoft SharePoint Server Elevation of Privilege Vulnerability

A critical flaw in Microsoft SharePoint Server allows attackers to gain administrative privileges without proper authorization. An attacker with network access can exploit this vulnerability to take control of the SharePoint system and access sensitive data.

CWE-303 (improper authentication) vulnerability in SharePoint Server permits privilege escalation through network access without requiring valid credentials. An authenticated or unauthenticated attacker can bypass access controls to obtain administrative privileges, impacting confidentiality, integrity, and availability of the SharePoint environment.