Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CWE-862