CVE-2023-29357

O que é

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CISA: Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.

O que fazer

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Prazo para as agências federais dos EUA: 31 de janeiro de 2024

• msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357