CVE-2023-23397
EUVD-2023-2749714.03.2023, 17:15
Microsoft Outlook Elevation of Privilege VulnerabilityEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | 365_apps | - |
| microsoft | 365_apps | 𝑥 < 2302 |
| microsoft | office | 𝑥 < 2302 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-294 - Authentication Bypass by Capture-replayA capture-replay flaw exists when the design of the software makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).