CVE-2024-43460: Dynamics 365 Business Central Elevation of Privilege Vulnerability
Published Sep 17, 2024
·Updated
Dynamics 365 Business Central Elevation of Privilege Vulnerability
Other sources
Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network.
— Microsoft
Affected Software
2 affected components
Microsoft Dynamics 365 Business Central
Microsoft Dynamics 365 Business Central Online
Remediation
Event History
Sep 17, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·06:15 PM
Data Sourced
via MITRE·06:15 PM
DescriptionSeverity
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43460?
CVE-2024-43460 is classified as an elevation of privilege vulnerability.
2
How do I fix CVE-2024-43460?
To fix CVE-2024-43460, apply the latest security updates provided by Microsoft for Dynamics 365 Business Central.
3
Who is affected by CVE-2024-43460?
CVE-2024-43460 affects users of Microsoft Dynamics 365 Business Central Online.
4
What type of vulnerability is CVE-2024-43460?
CVE-2024-43460 is an improper authorization vulnerability that allows authenticated attackers to elevate privileges.
5
Can CVE-2024-43460 be exploited remotely?
Yes, CVE-2024-43460 can be exploited over a network by an authenticated attacker.