CVE Vulnerabilities

CVE-2024-35248

Improper Authentication

Published: Jun 11, 2024 | Modified: Jun 20, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Dynamics_365_business_central Microsoft 2023-release_wave_1 (including) 2023-release_wave_1 (including)
Dynamics_365_business_central Microsoft 2023-release_wave_2 (including) 2023-release_wave_2 (including)
Dynamics_365_business_central Microsoft 2024-release_wave_1 (including) 2024-release_wave_1 (including)

Potential Mitigations

References