6.5
Medium
CVE-2020-16943 <p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce
Description
<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p> <p>To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.</p>
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dynamics 365 Commerce version 10.0.12 10.0 | 10.0.0 → latest | No fix stated |
| Dynamics 365 Commerce version 10.0.13 10.0 | 10.0.0 → latest | No fix stated |
| Dynamics 365 Commerce version 10.0.14 10.0 | 10.0.0 → latest | No fix stated |
| Dynamics 365 Commerce version 10.0.15 10.0 | 10.0.0 → latest | No fix stated |
| Dynamics 365 Commerce version 10.0.16 10.0 | 10.0.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified