Microsoft OneDrive for Android Information Disclosure Vulnerability
CVE-2023-24923 is an information disclosure vulnerability in Microsoft OneDrive (rated Important, CVSS 5.5).
1 version
Facts
- Microsoft id
CVE-2023-24923- Products
- Microsoft OneDrive
- Severity
- Important
- Impact
- Information Disclosure
- CVSS
- 5.5
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
- Exploited
- No
- Publicly disclosed
- No
- Exploitability
- Exploitation Less Likely
- Customer action required
- Yes
- Release
- 2023-Mar
- Assigned by
- Microsoft
- MSRC revision
- 1.0
- Status pages
- OneDrive status
- First captured by us
- (from our first import of this list)
- Microsoft last modified
- Source
- Security updates · open the original at Microsoft
Microsoft's revision notes
- Revision 1.0, 2023-03-14:
Information published.
Microsoft says
According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is information disclosure?
What Microsoft changed
One version so far. If Microsoft edits it, each change shows here with what was removed and added.
First version we captured ·
The text as we first saw it
Seen by us · Microsoft's timestamp · Microsoft's page
Related changes
Other changes for OneDrive
- SharePoint Online and OneDrive for Business endpoint set 31 (Worldwide)
- SharePoint Online and OneDrive for Business endpoint set 32 (Worldwide)
- SharePoint Online and OneDrive for Business endpoint set 35 (Worldwide)
- SharePoint Online and OneDrive for Business endpoint set 36 (Worldwide)
- SharePoint Online and OneDrive for Business endpoint set 37 (Worldwide)
- SharePoint Online and OneDrive for Business endpoint set 39 (Worldwide)
- SharePoint Online and OneDrive for Business endpoint set 9 (US Government DoD)
- SharePoint Online and OneDrive for Business endpoint set 10 (US Government DoD)