CVE-2022-41066: Microsoft Business Central Information Disclosure Vulnerability
Microsoft Business Central Information Disclosure Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in Application Build 20.7.48483, Platform Build 20.0.Patch KB5021002 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in Application Build 21.2.49990, Platform Build 21.0Patch KB5021003 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 49345Patch KB5021000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in Application Build 14.42.49347, Platform Build 14.0Patch KB5021001 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in Application Build 21.1.48638, Platform Build 21.0.Patch KB5021004
Event History
Frequently Asked Questions
What is CVE-2022-41066?
CVE-2022-41066 is a Microsoft Business Central Information Disclosure Vulnerability.
How severe is CVE-2022-41066?
CVE-2022-41066 has a severity rating of 4.4 (High).
Which software is affected by CVE-2022-41066?
Microsoft Dynamics 365 Business Central 2019 Spring Update, Microsoft Dynamics 365 Business Central 2022 Release Wave 1, Microsoft Dynamics 365 Business Central 2022 Release Wave 2, and Microsoft Dynamics NAV 2018 are affected by CVE-2022-41066.
How can I fix CVE-2022-41066?
You can apply the available patches or updates provided by Microsoft to fix CVE-2022-41066. Please refer to the following links for the specific remedies: Dynamics 365 Business Central 2022 Release Wave 1 (https://www.microsoft.com/en-us/download/details.aspx?id=104696), Dynamics 365 Business Central 2021 Release Wave 2 (https://www.microsoft.com/en-us/download/details.aspx?id=104697), Dynamics NAV 2018 (https://www.microsoft.com/en-us/download/details.aspx?id=104694), Dynamics 365 Business Central 2022 Release Wave 2 (https://www.microsoft.com/en-us/download/details.aspx?id=104693), and Dynamics 365 Business Central Spring 2019 Update (https://www.microsoft.com/en-us/download/details.aspx?id=104695).
Where can I find more information about CVE-2022-41066?
You can find more information about CVE-2022-41066 on the Microsoft Security Response Center (MSRC) website: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066.