CVE-2023-21743
published 2023-01-10CVE-2023-21743: Microsoft SharePoint Server Security Feature Bypass Vulnerability
PriorityP427medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
1.11%
62.6th percentile
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_sharepoint_enterprise_server_2016 | >= 16.0.0 < 16.0.5378.1000 | 16.0.5378.1000 |
| microsoft | microsoft_sharepoint_server_2019 | >= 16.0.0 < 16.0.10394.20021 | 16.0.10394.20021 |
| microsoft | microsoft_sharepoint_server_subscription_edition | >= 16.0.0 < 16.0.15601.20418 | 16.0.15601.20418 |
| microsoft | sharepoint_server | — | — |
| microsoft | sharepoint_server | — | — |
| msrc | microsoft_sharepoint_enterprise_server_2016 | — | — |
| msrc | microsoft_sharepoint_server_2019 | — | — |
| msrc | microsoft_sharepoint_server_subscription_edition | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
vendor_msrc5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j736-7m9g-xp23: Microsoft SharePoint Server Security Feature Bypass Vulnerability
ghsa_unreviewed·2023-01-11
CVE-2023-21743 [MEDIUM] GHSA-j736-7m9g-xp23: Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft SharePoint Server Security Feature Bypass Vulnerability.
Microsoft
Microsoft SharePoint Server Security Feature Bypass Vulnerability
vendor_msrc·2023-01-10·CVSS 5.3
CVE-2023-21743 [MEDIUM] CWE-306 Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft SharePoint Server Security Feature Bypass Vulnerability
FAQ: Are any additional steps required to protect my SharePoint farm after installing the January 10, 2023 security update for SharePoint Server?
Yes. Customers must also trigger a SharePoint upgrade action included in this update to protect their SharePoint farm. The upgrade action can be triggered by running the SharePoint Products Configuration Wizard, the Upgrade-SPFarm PowerShell cmdlet, or the "psconfig.exe -cmd upgrade -inplace b2b" command on each SharePoint server after installing the update.
FAQ: How could an attacker exploit this vulnerability?
In a network-based attack, an unauthenticated attacker could bypass authentication and make an anonymous connection.
FAQ: What kind of security feature could be bypassed
No detection rules found.
No public exploits indexed.
Krebs
Microsoft Patch Tuesday, January 2023 Edition
blogs_krebs·2023-01-10·CVSS 8.8
[HIGH] Microsoft Patch Tuesday, January 2023 Edition
Microsoft today released updates to fix nearly 100 security flaws in its Windows operating systems and other software. Highlights from the first Patch Tuesday of 2023 include a zero-day vulnerability in Windows, printer software flaws reported by the U.S. National Security Agency, and a critical Microsoft SharePoint Server bug that allows a remote, unauthenticated attacker to make an anonymous connection.
At least 11 of the patches released today are rated “Critical” by Microsoft, meaning they could be exploited by malware or malcontents to seize remote control over vulnerable Windows systems with little or no help from users.
Of particular concern for organizations running Microsoft SharePoint Server is CVE-2023-21743. This is a Critical security bypass flaw that could allow a remote, u
Talos
Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
blogs_talos·2023-01-10·CVSS 8.1
CVE-2023-21743 [HIGH] Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as “Critical”, 87 are classified as “Important”, no vulnerability classified as “Moderate.”
According to Microsoft all “Critical“ vulnerability are either less likely or unlikely to be exploited, except of the security bypass vulnerability CVE-2023-21743 on Microsoft SharePoint Server machines. This vulnerability has a low complexity and can be easily triggered by an attacker. In a network-based attack, an unauthenticated user could make an anonymous connection to the targeted SharePoint server.
Two of the “Critical“ vulnerabilities, which Microsoft considers to be “less likely” to be exploited due to their complexity are CVE-2023-21535 and CVE-2023-21548.
Qualys
The January 2023 Patch Tuesday Security Update Review | Qualys
blogs_qualys·2023-01-10·CVSS 5.3
CVE-2023-21743 [MEDIUM] The January 2023 Patch Tuesday Security Update Review | Qualys
#### Table of Contents
- Microsoft Patches for January2023
- Adobe Patches for January2023
- Microsoft End of support Product
- Notable and Critical Microsoft Vulnerabilities Patched
- CVE-2023-21743 Microsoft SharePoint Server Security Feature Bypass Vulnerability
- CVE-2023-21763 CVE-2023-21764 Microsoft Exchange Server Elevation of Privilege Vulnerability
- Other Microsoft Vulnerability Highlights
- Microsoft Release Summary
- Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
- Qualys Monthly Webinar Series
- This Month in Vulnerabilities & Patches
As we enter the first second Tuesday of the year, it is noteworthy that both Microsoft and Adobe have released their latest security updates and fixes. We invite you to join us as we review and
Talos
Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
blogs_talos·2023-01-10·CVSS 8.1
CVE-2023-21743 [HIGH] Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
## Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as “Critical”, 87 are classified as “Important”, no vulnerability classified as “Moderate.”
According to Microsoft all “Critical“ vulnerability are either less likely or unlikely to be exploited, except of the security bypass vulnerability CVE-2023-21743 on Microsoft SharePoint Server machines. This vulnerability has a low complexity and can be easily triggered by an attacker. In a network-based attack, an unauthenticated user could make an anonymous connection to the targeted SharePoint server.
Two of the “Critical“ vulnerabilities, which Microsoft considers to be “le
Krebs
Microsoft Patch Tuesday, January 2023 Edition
blogs_krebs·2023-01-10·CVSS 8.8
[HIGH] Microsoft Patch Tuesday, January 2023 Edition
Microsoft today released updates to fix nearly 100 security flaws in its Windows operating systems and other software. Highlights from the first Patch Tuesday of 2023 include a zero-day vulnerability in Windows, printer software flaws reported by the U.S. National Security Agency , and a critical Microsoft SharePoint Server bug that allows a remote, unauthenticated attacker to make an anonymous connection.
At least 11 of the patches released today are rated “Critical” by Microsoft, meaning they could be exploited by malware or malcontents to seize remote control over vulnerable Windows systems with little or no help from users.
Of particular concern for organizations running Microsoft SharePoint Server is CVE-2023-21743 . This is a Critical security bypass flaw that could allow a remote,
Qualys
The January 2023 Patch Tuesday Security Update Review
blogs_qualys·2023-01-10·CVSS 5.3
CVE-2023-21743 [MEDIUM] The January 2023 Patch Tuesday Security Update Review
## Table of Contents
Microsoft Patches for January2023
Adobe Patches for January2023
Microsoft End of support Product
Notable and Critical Microsoft Vulnerabilities Patched
CVE-2023-21743 Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2023-21763 CVE-2023-21764 Microsoft Exchange Server Elevation of Privilege Vulnerability
Other Microsoft Vulnerability Highlights
Microsoft Release Summary
Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
Qualys Monthly Webinar Series
This Month in Vulnerabilities & Patches
As we enter the first second Tuesday of the year, it is noteworthy that both Microsoft and Adobe have released their latest security updates and fixes. We invite you to join us as we review and discuss the p
Crowdstrike
January 2023 Patch Tuesday: Updates and Analysis
blogs_crowdstrike·CVSS 7.5
CVE-2026-20929 [HIGH] January 2023 Patch Tuesday: Updates and Analysis
STARDUST CHOLLIMA Likely Compromises Axios npm Package Apr 01, 2026
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management Apr 01, 2026
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse Mar 31, 2026
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem Mar 25, 2026
STARDUST CHOLLIMA Likely Compromises Axios npm Package Apr 01, 2026
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management Apr 01, 2026
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse Mar 31, 2026
How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem Mar 25, 2026
Video Highlights the 4 Key Steps to Successful Incident Response Dec 02, 2019
Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VI
Crowdstrike
January 2023 Patch Tuesday: Updates and Analysis
blogs_crowdstrike·CVSS 7.5
CVE-2026-20929 [HIGH] January 2023 Patch Tuesday: Updates and Analysis
How CrowdStrike is Accelerating Exposure Evaluation as Adversaries Gain Speed Apr 06, 2026
STARDUST CHOLLIMA Likely Compromises Axios npm Package Apr 01, 2026
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management Apr 01, 2026
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse Mar 31, 2026
How CrowdStrike is Accelerating Exposure Evaluation as Adversaries Gain Speed Apr 06, 2026
STARDUST CHOLLIMA Likely Compromises Axios npm Package Apr 01, 2026
Falcon for IT Supports Windows Secure Boot Certificate Lifecycle Management Apr 01, 2026
Detecting CVE-2026-20929: Kerberos Authentication Relay via CNAME Abuse Mar 31, 2026
Video Highlights the 4 Key Steps to Successful Incident Response Dec 02, 2019
Helping Non-Security Stakeholders Understand AT
2023-01-10
Published