CVE-2024-35248: high-severity vulnerability in Microsoft Dynamics 365 Business Central 2023…
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in Microsoft Dynamics 365 Business Central allows an authenticated user to gain higher privileges than they should have. This could let someone access sensitive business data or perform actions they're not supposed to.
An elevation of privilege vulnerability in Dynamics 365 Business Central permits authenticated attackers to escalate their user permissions beyond their assigned role. The vulnerability affects the privilege management mechanism (CWE-1390), potentially enabling unauthorized access to sensitive business operations and data.
In the same product, most dangerous first.