Skip to content
OpenAdvisories
Unscored CVE-2018-8518 EUVD-2018-20142GHSA-g49q-72gp-cj2r

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request …

Published Oct 10, 2018 · Updated Aug 5, 2024 · Assigned by microsoft

Description

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480, CVE-2018-8488, CVE-2018-8498.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Enterprise Server 2016 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
SLES 15 SP1 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1
SLES 15 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1
SLES 12 SP5 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SLES 12 SP4 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SLES 12 SP3 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SLES for SAP 15 SP1 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1
SLES for SAP 15 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1
SLES for SAP 12 SP5 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SLES for SAP 12 SP4 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SLES for SAP 12 SP3 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SLE HPC 15 SP1 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1
SLE HPC 15 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1
SUSE OpenStack Cloud Crowbar 9 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SUSE OpenStack Cloud Crowbar 8 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SUSE OpenStack Cloud 9 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SUSE OpenStack Cloud 8 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SUSE HPE Helion OpenStack 8 webkit2gtk3 2.34.3-2.82.1 SUSE-SU-2022:0142-1
SUSE Enterprise Storage 6 webkit2gtk3 2.34.3-3.92.1 SUSE-SU-2022:0183-1

Advisories 2

References