SharePoint, one of the tools included in the Microsoft Office, has been patched to protect users from a type-2 XSS (cross-site scripting) flaw that could expose their personal information.
The vulnerability ( CVE -2015-2522 ) , discovered by security researchers from FortiNet 's FortiGuard Labs , affects SharePoint 2013 15.0.4571.1502 and earlier versions.
SharePoint is a web app platform created by Microsoft developers , and combines a variety of management-related features into a single toolset, freeing administrators from having to deal with multiple software platforms at the same time .
According to FortiNet researchers, an attacker can exploit this vulnerability by inserting malicious code into input fields that are not properly checked by the Microsoft platform in question.
These fields are for recording notes, keywords, and comments, and anyone with access to them can store an XSS on the SharePoint server, which can then be distributed to unsuspecting users with access to the specific page where the XSS.
Successful exploitation of this vulnerability allows attackers to force victims to download and execute malicious code from controlled sources, redirecting the user's browser to another page that also distributes malicious content, or forges authentication via a popup that appears and asks the user for login credentials.
The researchers also claim that attackers can steal and expose personal information stored in authentication cookies, etc. This data, as FortiNet, can then be used in conjunction with the exploit kit and redirect users to a malware payload.
Furthermore, because SharePoint is often used in conjunction with Windows Active Directory, attackers can gain access to shared corporate login credentials, and therefore access to the entire suite of company services!
Microsoft released a patch for this vulnerability (MS 15-099) in one of its updates.
