Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?
The attacker who successfully exploits the vulnerability could download files without the access being logged.
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker could bypass the logging of downloaded files.
Security updates
16.0.10400.20008 — https://support.microsoft.com/help/5002423
16.0.16130.20642 — https://support.microsoft.com/help/5002424
Vulnerabilities 1
-
Medium 4.3
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2023-33165 Microsoft SharePoint Server Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33165
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss