Microsoft SharePoint Out-of-Band Unauthorized Access | MSSP Advisory

Microsoft released an emergency out-of-band patch for SharePoint, addressing an unspecified vulnerability that could allow unauthorized access to SharePoint environments. The patch targets SharePoint Server installations and indicates Microsoft considers this a serious enough security flaw to break their normal Patch Tuesday cycle. SharePoint typically stores critical business documents, credentials, and serves as a gateway to other enterprise systems.

SharePoint servers in your client environments hold documents, passwords, and often connect to Active Directory with elevated permissions that attackers prize for lateral movement. Your own SharePoint instance likely contains client documentation, contracts, and potentially stored credentials that could expose multiple client networks if compromised. Clients expect immediate notification when patches affect systems holding their sensitive data.

📬