Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVE-2023-29357)

What is the vulnerability?
A vulnerability in Microsoft SharePoint Server is actively being exploited and targeting servers from Government, Telco and Education industries. The vulnerability tracked under CVE-2023-29357 is an authentication bypass vulnerability that adversaries may use to escalate privileges on affected installations of Microsoft SharePoint Server. Attackers may chain the vulnerability with other vulnerabilities for remote code execution to compromise the integrity, availability, and confidentiality of the target system.


What is the Vendor Solution?


Microsoft has released an official …

adversaries attackers authentication authentication bypass bypass bypass vulnerability cve cve-2023-29357 education elevation of privilege exploited government industries may microsoft microsoft sharepoint privilege privileges server servers sharepoint targeting telco under vulnerability what is