PT-2023-3184 · Microsoft · Sharepoint Server+1

Publicado 2023-06-13 · Atualizado 2024-05-29 · CVE-2023-33142

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Server Subscription Edition (affected versions not specified)

Description The issue is related to insufficient access control in Microsoft SharePoint Server, allowing a remote attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or actions.

Recommendations For Microsoft SharePoint Server, apply the necessary security updates or patches to resolve the issue. For Microsoft SharePoint Server Subscription Edition, apply the necessary security updates or patches to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

CWE-264

Identificadores relacionados

BDU:2023-03293

CVE-2023-33142

Produtos afetados

Sharepoint Server

Sharepoint Server Subscription Edition

Referências · 6

• https://bdu.fstec.ru/vul/2023-03293 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-33142 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-33142 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33142 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-33142 · Nota de Segurança
• https://t.me/cibsecurity/65217 · Publicação no Telegram