Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-33159

8.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Sharepoint Enterprise Server 2016
Microsoft Sharepoint Server 2019
Microsoft Sharepoint Server Subscription Edition
Vendor
CVE Published:
11 July 2023

What is CVE-2023-33159?

A spoofing vulnerability exists in Microsoft SharePoint Server that allows an attacker to impersonate a legitimate user. This can lead to unauthorized access and compromise the integrity of the system, as attackers can manipulate the SharePoint environment by presenting deceptive content to users. Organizations using affected versions of SharePoint Server should implement security measures and apply any available updates to mitigate the risk posed by this vulnerability. For detailed information, visit the official advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Microsoft SharePoint Enterprise Server 2016 x64-based Systems 16.0.0 < 16.0.5404.1000

Microsoft SharePoint Server 2019 x64-based Systems 16.0.0 < 16.0.10400.20008

Microsoft SharePoint Server Subscription Edition x64-based Systems 16.0.0 < 16.0.16130.20642

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.