Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

A flaw in Microsoft Dynamics 365 Business Central allows an authenticated user to gain higher privileges than they should have. This could let someone access sensitive business data or perform actions they're not supposed to.

An elevation of privilege vulnerability in Dynamics 365 Business Central permits authenticated attackers to escalate their user permissions beyond their assigned role. The vulnerability affects the privilege management mechanism (CWE-1390), potentially enabling unauthorized access to sensitive business operations and data.