CVE detail
CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation Vulnerability
Published 2024-01-10 · Modified 2024-01-10 · Source kev
HIGH
severity
CVSS-derived band
0.9965
EPSS probability
exploitation probability, 30d
100.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2024-01-31
⚠ Actively exploited in the wild — CISA KEV listed 2024-01-10, federal remediation due 2024-01-31. RANSOMWARE
Description
Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References