Skip to content
6.5 Medium

CVE-2020-16943 <p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce

Description

<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p> <p>To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.</p>

Affected products and versions

Product Affected versions Fixed in
Dynamics 365 Commerce version 10.0.12 10.0 10.0.0 → latest No fix stated
Dynamics 365 Commerce version 10.0.13 10.0 10.0.0 → latest No fix stated
Dynamics 365 Commerce version 10.0.14 10.0 10.0.0 → latest No fix stated
Dynamics 365 Commerce version 10.0.15 10.0 10.0.0 → latest No fix stated
Dynamics 365 Commerce version 10.0.16 10.0 10.0.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified
Track this CVE