CISA 將 Microsoft SharePoint Server 漏洞 CVE-2023-29357 列入已知遭利用目錄

CISA 列入紀錄

CISA 於 2024-01-10 將 CVE-2023-29357 列入 ，產品為 Microsoft SharePoint Server ^[2]。

原始技術描述

Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges. ^[2]

官方要求

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. ^[2]

個別事件原始紀錄

美國國家漏洞資料庫（NVD）提供 CVE-2023-29357 的獨立漏洞紀錄與說明。 ^[1]