Exploited vulnerability

CVE-2023-29357

TLP:CLEAR

Microsoft SharePoint Server Privilege Escalation Vulnerability

Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.

Facts

Vendor: Microsoft
Product: SharePoint Server
CVSS: 9.8
EPSS (probability of exploitation within 30 days): 100 %
On CISA's Known Exploited Vulnerabilities list since: 10 January 2024
First known exploitation: 10 January 2024
Used in ransomware campaigns (per CISA): Yes
CISA's deadline for US federal agencies: 31 January 2024
Weakness: CWE-303
First seen by Risk Letters: 10 January 2024

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD