Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

A flaw in Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive information they shouldn't see. An attacker with basic access to the system could read confidential data without proper authorization.

CWE-643 (Improper Neutralization of Data Queries) in Dynamics 365 On-Premises allows information disclosure through insufficient access controls. An authenticated attacker can bypass query restrictions to access sensitive data; the vulnerability requires existing system access but results in unauthorized information exposure.