8.7
Élevée
Exploitée
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-269
Description
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Partner Center | Versions non publiées |
Références
- Partner.Microsoft.Com Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Microsoft Partner Center
Les 7 CVE de Microsoft Partner Center →
CVE-2026-96207
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a…
10.0
Critique
CVE-2026-69558
Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose…
8.6
Élevée
CVE-2026-34327
Externally controlled reference to a resource in another sphere in Microsoft Partner Center allows an unauthorized…
8.2
Élevée
CVE-2026-24303
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a…
9.6
Critique