Token Hijacking Vulnerability in Microsoft Office 2013 Products
CVE-2013-5054

Currently unrated

Key Information:

Vendor
Microsoft
Status
Office 2013 Rt
Office
Vendor
CVE Published:
11 December 2013

Summary

The vulnerability in Microsoft Office 2013 and 2013 RT enables remote attackers to gain unauthorized access to user authentication tokens. This occurs through a specially crafted response to a file-open request for an Office document hosted on a website. Exploitation of this vulnerability can lead to significant security concerns, as attackers can effectively hijack user sessions and compromise sensitive information.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

11% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.