Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive information they shouldn't be able to see. This matters because confidential business data could be exposed without proper authentication.

An information disclosure vulnerability in Microsoft Dynamics 365 (On-Premises) permits unauthenticated or low-privileged attackers to retrieve sensitive data through improper access controls. The vulnerability stems from insufficient validation of user permissions, allowing bypass of data classification protections without requiring exploitation of additional components.