CVE-2023-21743 Microsoft SharePoint Server Security Feature Bypass Vulnerability

🗓️ 10 Jan 2023 00:00:00Reported by microsoftType

Security feature bypass vulnerability in Microsoft SharePoint Server CVE-2023-21743

Reporter	Title	Published	Views	Family All 27
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in security configuration errors, allowing attackers to circumvent existing security restrictions.	18 Jan 202300:00	–	bdu_fstec
Circl	CVE-2023-21743	11 Jan 202300:35	–	circl
CNNVD	Microsoft SharePoint 安全漏洞	10 Jan 202300:00	–	cnnvd
CNVD	Microsoft SharePoint Server Security Feature Bypass Vulnerability (CNVD-2023-04532)	12 Jan 202300:00	–	cnvd
CVE	CVE-2023-21743	10 Jan 202300:00	–	cve
EUVD	EUVD-2023-25910	3 Oct 202520:07	–	euvd
Microsoft KB	Description of the security update for SharePoint Server 2019: January 10, 2023 (KB5002329)	10 Jan 202308:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server Subscription Edition: January 10, 2023 (KB5002331)	10 Jan 202308:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: January 10, 2023 (KB5002338)	10 Jan 202308:00	–	mskb
Kaspersky	KLA20157 Multiple vulnerabilities in Microsoft Office	10 Jan 202300:00	–	kaspersky

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Enterprise Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.5378.1000",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.10394.20021",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server Subscription Edition",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "16.0.15601.20418",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21743

01 Jan 2025 00:35Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.01124

CWE-306