⚠ Actively exploited in ransomware campaigns
This vulnerability is on the CISA Known Exploited Vulnerabilities list and has been used in known ransomware attacks. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Due date: 2024-01-31.
CVE-2023-29357 — Incorrect Implementation of Authentication Algorithm in Microsoft Sharepoint Server 2019
Severity
9.8CRITICALNVD
EPSS
94.4%
top 0.04%
CISA KEV
KEVRansomware
Added 2024-01-10
Due 2024-01-31
Exploit
Exploited in wild
Active exploitation observed
Affected products
Timeline
PublishedJun 14
KEV addedJan 10
KEV dueJan 31
Latest updateMar 27
CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages2 packages
Patches
🔴Vulnerability Details
3💥Exploits & PoCs
2Nuclei▶
Microsoft SharePoint - Authentication Bypass