Detections
Analytics

Security Updates for Microsoft SharePoint Server Subscription Edition (October 2024)

high Nessus Plugin ID 208300

Synopsis

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing a security update.

Description

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability.

Solution

Microsoft has released KB5002649 to address this issue.

See Also

https://support.microsoft.com/en-us/help/5002649

Plugin Details

Severity: High

ID: 208300

File Name: smb_nt_ms24_oct_office_sharepoint_subscr.nasl

Version: 1.1

Type: local

Agent: windows

Published: 10/8/2024

Updated: 10/8/2024

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-43503

CVSS v3

Risk Factor: High

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:microsoft:sharepoint_server:subscription

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Patch Publication Date: 10/8/2024

Vulnerability Publication Date: 10/8/2024

Reference Information

CVE: CVE-2024-43503

MSFT: MS23-5002649

MSKB: 5002649