A proof-of-concept exploit chain has been released for two vulnerabilities in Microsoft SharePoint Server that can be exploited to achieve unauthenticated remote code execution.

CVE-2023-29357, CVE-2023-24955: Exploit Chain Released for Microsoft SharePoint Server Vulnerabilities

Microsoft addresses 70 CVEs in its June 2023 Patch Tuesday update including six rated as critical.

Microsoft’s June 2023 Patch Tuesday Addresses 70 CVEs (CVE-2023-29357)

Microsoft SharePoint Server Elevation of Privilege Vulnerability

The Microsoft SharePoint Server running on the remote host is affected by an authentication bypass vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted message, to access protected resources.

Note that this plugin only tests the SharePoint site collections at / and /my.

Microsoft SharePoint Server 2019 build < 16.0.10399.20005 is vulnerable to an Elevation of Privilege. An attacker who successfully exploited this vulnerability could gain administrator privileges.

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities:
  - A Sharepoint Server elevation of privilege vulnerabilty. (CVE-2023-29357, CVE-2023-33142)

  - A Sharepoint Server spoofing vulnerability. (CVE-2023-33130, CVE-2023-33132)   
  - A Sharepoint Server denial of service vulnerabilty. (CVE-2023-33129)

ID	Name	Product	Family	Severity
187058	Microsoft SharePoint Authentication Bypass (CVE-2023-29357)	Nessus	Windows	critical
114099	Microsoft SharePoint Server 2019 build < 16.0.10399.20005 Elevation of Privilege	Web App Scanning	Component Vulnerability	critical
177243	Security Updates for Microsoft SharePoint Server 2019 (June 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-29357

critical

Tenable Plugins

critical

critical

critical