{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Christian P\u0026#246;schl with \u003ca href=\"https://herolab.usd.de/\"\u003eusd AG\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2023-29347 Windows Admin Center Spoofing Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29347"
      },
      {
        "category": "self",
        "summary": "CVE-2023-29347 Windows Admin Center Spoofing Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2023/msrc_cve-2023-29347.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Windows Admin Center Spoofing Vulnerability",
    "tracking": {
      "current_release_date": "2023-07-11T07:00:00.000Z",
      "generator": {
        "date": "2025-01-01T01:51:50.895Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2023-29347",
      "initial_release_date": "2023-07-11T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-07-11T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c2306",
            "product": {
              "name": "Windows Admin Center \u003c2306",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "2306",
            "product": {
              "name": "Windows Admin Center 2306",
              "product_id": "11629"
            }
          }
        ],
        "category": "product_name",
        "name": "Windows Admin Center"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-29347",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "Customers can download the latest build of Windows Admin Center by using this link: aka.ms/downloadwac",
          "title": "Where can customer obtain the updated software?"
        },
        {
          "category": "faq",
          "text": "The vulnerability is in the web server, but the malicious scripts execute in the victim\u2019s browser on their machine.",
          "title": "According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?"
        },
        {
          "category": "faq",
          "text": "An authenticated attacker could exploit the vulnerability by carrying out any one of the following actions:\nImporting a malicious script to the Windows Admin Center (WAC) HTML form.\nImporting a .csv file using the Windows Admin Center (WAC) user interface.\nImporting a .csv file using the Windows Admin Center (WAC) API.\nIf the victim who triggers the attack is a highly-privileged administrator the injected scripts could perform operations on the WAC server, thus spoofing the WAC application with the privileges of the victim administrator.",
          "title": "How could an attacker exploit this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "11629"
        ],
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2023-29347 Windows Admin Center Spoofing Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29347"
        },
        {
          "category": "self",
          "summary": "CVE-2023-29347 Windows Admin Center Spoofing Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29347"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-07-11T07:00:00.000Z",
          "details": "2306:Security Update:https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/release-history",
          "product_ids": [
            "1"
          ],
          "url": "https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/release-history"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "CHANGED",
            "temporalScore": 7.6,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Spoofing"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Windows Admin Center Spoofing Vulnerability"
    }
  ]
}