Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

The U.S. Cybersecurity and Infrastructure Security Company (CISA) has added a critical security vulnerability impacting Microsoft SharePoint Server to its Identified Exploited Vulnerabilities (KEV) catalog, citing proof of active exploitation.

The issue, tracked as CVE-2023-29357 (CVSS rating: 9.8), is a privilege escalation flaw that could be exploited by an attacker to acquire administrator privileges. Microsoft introduced patches for the bug as aspect of its June 2023 Patch Tuesday updates.

“An attacker who has obtained access to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and enables them to get obtain to the privileges of an authenticated consumer,” Redmond claimed. “The attacker desires no privileges nor does the person need to carry out any motion.”

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

Security researcher Nguyễn Tiến Giang (Jang) of StarLabs SG shown an exploit for the flaw at the Pwn2Own Vancouver hacking contest, earning a $100,000 prize.

The pre-authenticated remote code execution chain combines authentication bypass (CVE-2023–29357) with a code injection bug (CVE-2023-24955, CVSS rating: 7.2), the latter of which was patched by Microsoft in May perhaps 2023.

“The approach of finding and crafting the exploit chain eaten virtually a yr of meticulous effort and hard work and analysis to finish the whole exploit chain,” Tiến Giang famous in a specialized report printed in September 2023.

More particulars of the genuine-environment exploitation of CVE-2023–29357 and the id of the danger actors that may be abusing them are presently not known. That mentioned, federal organizations are advised to utilize the patches by January 31, 2024, to secure from the lively threat.

Located this write-up intriguing? Comply with us on Twitter  and LinkedIn to read additional special articles we post.