CVE-2022-41066: Microsoft Dynamics Business Central Information Disclosure Vulnerability
Microsoft Business Central Information Disclosure Vulnerability
Other sources
Microsoft Dynamics Business Central Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.0.49339Patch KB5021001 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 20.0.48457Patch KB5021002 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 19.0.48446Patch KB5021003 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 21.0.48504Patch KB5021004 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 49345Patch KB5021000
Event History
Frequently Asked Questions
What is CVE-2022-41066?
CVE-2022-41066 is a Microsoft Business Central Information Disclosure Vulnerability.
How severe is CVE-2022-41066?
CVE-2022-41066 has a severity rating of 4.4 (High).
Which software is affected by CVE-2022-41066?
Microsoft Dynamics 365 Business Central 2019 Spring Update, Microsoft Dynamics 365 Business Central 2022 Release Wave 1, Microsoft Dynamics 365 Business Central 2022 Release Wave 2, and Microsoft Dynamics NAV 2018 are affected by CVE-2022-41066.
How can I fix CVE-2022-41066?
You can apply the available patches or updates provided by Microsoft to fix CVE-2022-41066. Please refer to the following links for the specific remedies: Dynamics 365 Business Central 2022 Release Wave 1 (https://www.microsoft.com/en-us/download/details.aspx?id=104696), Dynamics 365 Business Central 2021 Release Wave 2 (https://www.microsoft.com/en-us/download/details.aspx?id=104697), Dynamics NAV 2018 (https://www.microsoft.com/en-us/download/details.aspx?id=104694), Dynamics 365 Business Central 2022 Release Wave 2 (https://www.microsoft.com/en-us/download/details.aspx?id=104693), and Dynamics 365 Business Central Spring 2019 Update (https://www.microsoft.com/en-us/download/details.aspx?id=104695).
Where can I find more information about CVE-2022-41066?
You can find more information about CVE-2022-41066 on the Microsoft Security Response Center (MSRC) website: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41066.