ZDI-CAN-20716: ZDI-23-882: (Pwn2Own) Microsoft SharePoint ValidateTokenIssuer Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability
Published Jun 16, 2023
·Updated
This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability.
Affected Software
1 affected component
Microsoft SharePoint
Event History
Jun 16, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-20716?
ZDI-CAN-20716 is considered to have a high severity rating due to its potential for unauthorized access.
2
How do I fix ZDI-CAN-20716?
To fix ZDI-CAN-20716, apply the latest security patches provided by Microsoft for SharePoint.
3
What systems are affected by ZDI-CAN-20716?
ZDI-CAN-20716 affects various installations of Microsoft SharePoint that are not properly secured.
4
Can ZDI-CAN-20716 be exploited remotely?
Yes, ZDI-CAN-20716 allows remote attackers to bypass authentication without requiring physical access.
5
What is the impact of ZDI-CAN-20716?
The impact of ZDI-CAN-20716 includes unauthorized access to sensitive information and potentially compromising the entire SharePoint installation.