Mitigation Instructions for Microsoft SharePoint Server CVE-2023-29357

SUBJECT: CVE-2023-29357: Microsoft SharePoint Server Privilege Escalation Vulnerability - Detailed Mitigation Guide

TECH STACK: SharePoint Server 2019

DATE(S) ISSUED: 06/13/2023

NVD Last Modified: 01/10/2024

CRITICALITY: CVSS v3 Score: 9.8 (CRITICAL)

OVERVIEW: 

This vulnerability template details the mitigation strategies for CVE-2023-29357, a critical privilege escalation vulnerability affecting Microsoft SharePoint Server 2019. This vulnerability allows attackers with unprivileged access to gain elevated privileges on the server, potentially leading to complete system compromise.

IMPACT/SIGNIFICANCE:

Successful exploitation of this vulnerability could allow attackers to:

1. Gain complete control over the SharePoint server.
2. Access sensitive data, including user credentials and confidential information.
3. Modify or delete data.
4. Disrupt server operations.
5. Deploy malware and launch further attacks on the network.

Here are the recommended mitigation strategies:

1. Apply the security patch:

• The most critical mitigation strategy is to apply the security patch released by Microsoft as soon as possible. You can find the patch and download instructions on the Microsoft Security Response Center (MSRC) website: 

2. Implement additional security measures:

• Enable least privilege: Grant users the minimum permissions required to perform their tasks. This principle minimizes the potential damage if an attacker gains access to a user account.
• Implement application control: Implement application control measures to restrict the execution of unauthorized code on the SharePoint server.
• Monitor for suspicious activity: Regularly monitor your SharePoint server for signs of suspicious activity, such as unauthorized access attempts or unusual system behavior.

ADDITIONAL RESOURCES

• Microsoft Security Response Center (MSRC)

• CISA Known Exploited Vulnerabilities Catalog

• National Vulnerability Database (NVD) 

CONCLUSION

• Applying the recommended mitigation strategies, especially installing the security patch promptly, is crucial to protect your Microsoft SharePoint Server from exploitation of CVE-2023-29357. Remember to prioritize patching critical vulnerabilities and implement additional security controls to enhance your overall security posture.