2020-JUN-16 FSL version 7.6.163 MCAFEE FOUNDSTONE FSL UPDATE To better protect your environment McAfee has created this FSL check update for the Foundstone Product Suite. The following is a detailed summary of the new and updated checks included with this release. NEW CHECKS 26675 - (MSPT-Jun2020) Microsoft Outlook Information Disclosure (CVE-2020-1229) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1229 Description A vulnerability in some versions of Microsoft Outlook could lead to Security Feature Bypass. Observation A vulnerability in some versions of Microsoft Outlook could lead to Security Feature Bypass. The flaw lies in improperly enforce security settings configured. Successful exploitation by an attacker could result in the security feature bypass. The exploit requires the user to open a vulnerable website, email or document. 26634 - (MSPT-Jun2020) Microsoft Windows GDI Remote Code Execution (CVE-2020-1248) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1248 Description A vulnerability in some versions of Microsoft Windows could lead to remote code execution. Observation A vulnerability in some versions of Microsoft Windows could lead to remote code execution. The flaw lies in the GDI component. Successful exploitation by an attacker could result in the execution of arbitrary code. The exploit requires the user to open a vulnerable website, email or document. 26647 - (MSPT-Jun2020) Microsoft Store Runtime Privilege Escalation (CVE-2020-1222) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1222 Description A vulnerability in some versions of Microsoft Store Runtime could lead to privilege escalation. Observation A vulnerability in some versions of Microsoft Store Runtime could lead to privilege escalation. The flaw lies in improperly handles objects in memory. Successful exploitation could allow a local user to gain elevated privileges. The exploit requires the attacker to have valid credentials to the vulnerable system. 26673 - (MSPT-Jun2020) Microsoft Excel Remote Code Execution (CVE-2020-1225) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1225 Description A vulnerability in some versions of Microsoft Excel could lead to remote code execution. Observation A vulnerability in some versions of Microsoft Excel could lead to remote code execution. The flaw lies in improperly handle objects in memory. Successful exploitation by an attacker could result in the execution of arbitrary code. The exploit requires the user to open a vulnerable website, email or document. 26674 - (MSPT-Jun2020) Microsoft Excel Remote Code Execution (CVE-2020-1226) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1226 Description A vulnerability in some versions of Microsoft Excel could lead to remote code execution. Observation A vulnerability in some versions of Microsoft Excel could lead to remote code execution. The flaw lies in improperly handle objects in memory. Successful exploitation by an attacker could result in the execution of arbitrary code. The exploit requires the user to open a vulnerable website, email or document. 26678 - (MSPT-Jun2020) Microsoft Team Foundation Server HTML Injection (CVE-2020-1327) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1327 Description A vulnerability in some versions of Microsoft Team Foundation Server could lead to HTML Injection. Observation A vulnerability in some versions of Microsoft Team Foundation Server could lead to HTML Injection. The flaw lies in improperly handle web requests. Successful exploitation by a remote attacker could result in HTML Injection. The exploit requires the user to open a vulnerable website, email or document. 26681 - (MSPT-Jun2020) Microsoft SharePoint Server Spoofing (CVE-2020-1148) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1148 Description A vulnerability in some versions of Microsoft SharePoint Server could lead to spoofing. Observation A vulnerability in some versions of Microsoft SharePoint Server could lead to spoofing. The flaw lies in the properly sanitize a crafted web request. Successful exploitation by a remote attacker could result in spoofing The exploit requires the user to open a vulnerable website, email or document. 26682 - (MSPT-Jun2020) Microsoft SharePoint Server Cross Site Scripting (CVE-2020-1177) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1177 Description A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. Observation A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. The flaw lies in improperly sanitize a crafted web request. Successful exploitation by a remote attacker could result in the execution of arbitrary code. The exploit requires the user to open a vulnerable website, email or document. 26685 - (MSPT-Jun2020) Microsoft SharePoint Server Cross Site Scripting (CVE-2020-1183) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1183 Description A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. Observation A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting The flaw lies in improperly sanitize a crafted web request. Successful exploitation by a remote attacker could result in the execution of arbitrary code. The exploit requires the user to open a vulnerable website, email or document. 26688 - (MSPT-Jun2020) Microsoft SharePoint Server Cross Site Scripting (CVE-2020-1297) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1297 Description A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. Observation A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. The flaw lies in improperly sanitize crafted Web request. Successful exploitation by a remote attacker could affect the integrity of the target. 26690 - (MSPT-Jun2020) Microsoft SharePoint Server Cross Site Scripting (CVE-2020-1318) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1318 Description A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. Observation A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. The flaw lies in improperly sanitize a crafted web request. Successful exploitation by a remote attacker could affect the integrity of the target. 26691 - (MSPT-Jun2020) Microsoft SharePoint Server Cross Site Scripting (CVE-2020-1320) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1320 Description A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. Observation A vulnerability in some versions of Microsoft SharePoint Server could lead to cross site scripting. The flaw lies in improperly sanitize a crafted web request. Successful exploitation by a remote attacker could affect the integrity of the target. 26692 - (MSPT-Jun2020) Microsoft Windows SharePoint Open Redirect (CVE-2020-1323) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-1323 Description A vulnerability in some versions of Microsoft Windows could lead to spoofing. Observation A vulnerability in some versions of Microsoft Windows could lead to spoofing. The flaw lies in the SharePoint component. Successful exploitation could allow a local user to disclose sensitive information. The exploit requires the user to open a vulnerable website, email or document. 26693 - (APSB20-30) Vulnerability In Adobe Flash Player Category: Windows Host Assessment -> Adobe Patches Only (CATEGORY REQUIRES CREDENTIALS) Risk Level: High CVE: CVE-2020-9633 Description A vulnerability in some versions of Adobe Flash Player could lead to remote code execution. Observation A vulnerability in some versions of Adobe Flash Player could lead to remote code execution. The flaw lies in an unknown component. Successful exploitation by a remote attacker could result in the execution of arbitrary code. 26649 - (MSPT-Jun2020) Microsoft Windows onnected User Experiences and Telemetry Service Denial of Service (CVE- 2020-1244) Category: Windows Host Assessment -> Patches and Hotfixes (CATEGORY REQUIRES CREDENTIALS) Risk Level: Medium CVE: CVE-2020-1244 Description A vulnerability in some versions of Microsoft Windows could lead to a denial of service. Observation A vulnerability in some versions of Microsoft Windows could lead to a denial of service. The flaw lies in the onnected User Experiences and Telemetry Service component. Successful exploitation by an attacker could result in a denial of service condition. The exploit requires the attacker to have valid credentials to the vulnerable system.