6.5
Moyenne
CVE-2020-16943 <p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce
Description
<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p> <p>To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.</p>
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dynamics 365 Commerce version 10.0.12 10.0 | 10.0.0 → dernières | Pas de correctif indiqué |
| Dynamics 365 Commerce version 10.0.13 10.0 | 10.0.0 → dernières | Pas de correctif indiqué |
| Dynamics 365 Commerce version 10.0.14 10.0 | 10.0.0 → dernières | Pas de correctif indiqué |
| Dynamics 365 Commerce version 10.0.15 10.0 | 10.0.0 → dernières | Pas de correctif indiqué |
| Dynamics 365 Commerce version 10.0.16 10.0 | 10.0.0 → dernières | Pas de correctif indiqué |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification