CVE-2024-38182: critical vulnerability in Microsoft Dynamics 365 Field Service…
Microsoft Dynamics 365 Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Microsoft Dynamics 365 has weak authentication that allows someone without proper credentials to gain elevated permissions remotely. This is critical because attackers can take control of business systems and access sensitive data.
The vulnerability involves insufficient authentication mechanisms in Microsoft Dynamics 365, enabling unauthenticated remote attackers to achieve privilege escalation. Attack vectors include network-based exploitation without valid credentials; the impact includes unauthorized administrative access to the system.
In the same product, most dangerous first.