CVE-2023-29357

CISA Known Exploited Vulnerability

Microsoft SharePoint Server Privilege Escalation Vulnerability — Microsoft SharePoint Server

Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.

Added to KEV

2024-01-10

Remediation due

2024-01-31

Ransomware use

Known

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357; https://nvd.nist.gov/vuln/detail/CVE-2023-29357