Microsoft Office Elevation of Privilege Vulnerability
Priority MEDIUM 51CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, an attacker would need to modify the token. The update addresses the vulnerability by modifying how Microsoft SharePoint Server and Skype for Business Server validate tokens.
Why it matters now
EPSS 0.05853 93rd percentileScored 2026-11-07
Fix Fixed Skype for Business Server 2019 CU2 (Microsoft): publicationSkype for Business Server 2015 CU 8 (Microsoft): publication+4 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Skype for Business Server 2019 CU2 | 7.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Skype for Business Server 2015 CU 8 | 2015 CU 8 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft Lync Server 2013 | before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SharePoint Enterprise Server 2016 | 16.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SharePoint Server 2019 | 16.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft SharePoint Foundation 2013 Service Pack 1 | 15.0.0 to before publication | publication | Patch available | CNA |
- Skype for Business Server 2019 CU2 VendorMicrosoft Affected 7.0.0 to before publication Fixed in publication Patch available CNA
- Skype for Business Server 2015 CU 8 VendorMicrosoft Affected 2015 CU 8 to before publication Fixed in publication Patch available CNA
- Microsoft Lync Server 2013 VendorMicrosoft Affected before publication Fixed in publication Patch available CNA
- Microsoft SharePoint Enterprise Server 2016 VendorMicrosoft Affected 16.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SharePoint Server 2019 VendorMicrosoft Affected 16.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft SharePoint Foundation 2013 Service Pack 1 VendorMicrosoft Affected 15.0.0 to before publication Fixed in publication Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:lync:2013:*:*:*:*:*:*:* | 2013 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* | 2016 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:* | 2013 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* | 2019 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:skype_for_business:2015:cumulative_update_8:*:*:*:*:*:* | 2015 cumulative_update_8 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:skype_for_business:2019:cumulative_update_2:*:*:*:*:*:* | 2019 cumulative_update_2 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:lync:2013:*:*:*:*:*:*:* Versions 2013 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* Versions 2016 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:* Versions 2013 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* Versions 2019 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:skype_for_business:2015:cumulative_update_8:*:*:*:*:*:* Versions 2015 cumulative_update_8 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:skype_for_business:2019:cumulative_update_2:*:*:*:*:*:* Versions 2019 cumulative_update_2 Vulnerable ·Microsoft
Remediation
- Fix · CNA Skype for Business Server 2019 CU2 (Microsoft) Fixed in publication
- Fix · CNA Skype for Business Server 2015 CU 8 (Microsoft) Fixed in publication
- Fix · CNA Microsoft Lync Server 2013 (Microsoft) Fixed in publication
- Fix · CNA Microsoft SharePoint Enterprise Server 2016 (Microsoft) Fixed in publication
- Fix · CNA Microsoft SharePoint Server 2019 (Microsoft) Fixed in publication
- Fix · CNA Microsoft SharePoint Foundation 2013 Service Pack 1 (Microsoft) Fixed in publication
Timeline
- 2026-10-02 Threatist record created from CVE-2020-1025
- 2026-10-03 Alias added: GHSA-5xrx-pfvm-p5p8
More Microsoft Lync vulnerabilities
- TI-2015-01495 The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1… KEVCVSS 3.1HIGH 7.8
- TI-2013-03410 GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and… KEVCVSS 3.1HIGH 7.8
- TI-2015-02157 Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows… CVSS 2.0HIGH 9.3
- TI-2016-06177 The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2… CVSS 3.0CRITICAL 9.8
- TI-2016-00122 The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1… CVSS 3.0HIGH 8.8
- TI-2015-02207 Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows… CVSS 2.0HIGH 9.3
Sources
- CVE-2020-1025 · CVE Program
- CVE-2020-1025 · NVD
- FIRST EPSS
- GHSA-5xrx-pfvm-p5p8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences