CVE-2024-43612: Power BI Report Server Spoofing Vulnerability
Published Oct 8, 2024
·Updated
Power BI Report Server Spoofing Vulnerability
Affected Software
2 affected componentsFixes available
Microsoft Power BI Report Server<15.0.1116.121
Microsoft Power BI Report Server - May 2024
Remediation
Event History
Oct 8, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43612?
The CVE-2024-43612 vulnerability is classified as a spoofing vulnerability.
2
How do I fix CVE-2024-43612?
To fix CVE-2024-43612, update to the latest version of Microsoft Power BI Report Server.
3
Which versions are affected by CVE-2024-43612?
CVE-2024-43612 affects Microsoft Power BI Report Server versions prior to 15.0.1116.121.
4
Is CVE-2024-43612 exploitable remotely?
Yes, CVE-2024-43612 could potentially be exploited remotely by an attacker.
5
What impact does CVE-2024-43612 have on users?
CVE-2024-43612 can allow an attacker to impersonate other users in the Power BI Report Server system.