Lucene search

K
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.MICROSOFT_SHAREPOINT_CVE-2023-29357.NBIN
HistoryDec 18, 2023 - 12:00 a.m.

Microsoft SharePoint Authentication Bypass (CVE-2023-29357)

2023-12-1800:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
27
microsoft sharepoint
authentication bypass
cve-2023-29357
binary data
scanner

7.4 High

AI Score

Confidence

Low

The Microsoft SharePoint Server running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to access protected resources.

Note that this plugin only tests the SharePoint site collections at / and /my.

Binary data microsoft_sharepoint_cve-2023-29357.nbin
VendorProductVersionCPE
microsoftsharepoint_servercpe:/a:microsoft:sharepoint_server