CVE-2024-38182

Critical

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.

secure@microsoft.com·CWE-1390·Published 2024-07-31

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

118 chars

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.

NVDen

118 chars

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.

NVDes

121 chars

La autenticación débil en Microsoft Dynamics 365 permite que un atacante no autenticado eleve los privilegios en una red.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.0	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C