Network Alerts

SharePoint Vulnerability

Posted by Eric Bronson - October 03, 2023 - Vulnerability, SharePoint, Microsoft

About the Alert

Exploitation code has been made public regarding Microsoft's SharePoint Server. Tracked as CVE-2023-29357 with a critical severity level, the disclosed vulnerability could allow escalation of privileges to a remote, unauthenticated threat actor. Specifics of the vulnerability and exploitation can be found here. Please note that this vulnerability only applies to those with an on-premise SharePoint server.

Product(s) Affected: 

Microsoft SharePoint Server 2019

Key Takeaways:

  • Critical Severity
  • Malicious actor(s) could gain administrator access to SharePoint
  • Requires software update to address the vulnerability

Mitigating the Vulnerability

It is recommended to apply the appropriate Microsoft security updates to the SharePoint server. If you utilize any of the affected products and would like assistance with assessing exposure or best go forward plan, please reach out to your SymQuest Account Executive.

Never miss a critical vulnerability alert

Stay in the know and receive a notification right to your inbox when a security message is posted.

Subscribe

Subscribe to receive Network Alerts

×