Security Updates for Microsoft SharePoint Server 2013 (March 2023)

low Nessus Plugin ID 172534

Synopsis

The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability.

Description

The Microsoft SharePoint Foundation 2013 installation on the remote host is missing security updates. It is, therefore, affected by a Sharepoint server spoofing vulnerability.

Solution

Microsoft has released KB5002168 to address this issue.

See Also

https://support.microsoft.com/en-us/help/5002168

Plugin Details

Severity: Low

ID: 172534

File Name: smb_nt_ms23_mar_office_sharepoint_2013_server.nasl

Version: 1.4

Type: local

Agent: windows

Published: 3/14/2023

Updated: 4/13/2023

Supported Sensors: Frictionless Assessment Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 1.4

CVSS v2

Risk Factor: Low

Base Score: 2.6

Temporal Score: 1.9

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2023-23395

CVSS v3

Risk Factor: Low

Base Score: 3.1

Temporal Score: 2.7

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:sharepoint_server

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 3/14/2023

Vulnerability Publication Date: 3/14/2023

Reference Information

CVE: CVE-2023-23395

IAVA: 2023-A-0133-S

MSFT: MS23-5002168

MSKB: 5002168