MSRC-CVE-2023-24950 — Microsoft SharePoint Server Spoofing Vulnerability

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

How could an attacker exploit the vulnerability?
In a network-based attack an attacker who has privileges to create a site on a vulnerable SharePoint server could use this vulnerability to cause the server to leak its NTLM hash.

Security updates
16.0.5395.1000 — https://support.microsoft.com/help/5002397
16.0.10398.20000 — https://support.microsoft.com/help/5002389
16.0.16130.20420 — https://support.microsoft.com/help/5002390

Vulnerabilities 1

Medium 6.5

CVE-2023-24950 EPSS 67%

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

May 9, 2023

Revision history

2023-05-09 #1
Information published.

References

CVE-2023-24950 Microsoft SharePoint Server Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24950
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss