Description
<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p> <p>To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.</p>
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Dynamics 365 Commerce version 10.0.12
10.0.0 to < publicationaffected
Microsoft Dynamics 365 Commerce version 10.0.13
10.0.0 to < publicationaffected
Microsoft Dynamics 365 Commerce version 10.0.14
10.0.0 to < publicationaffected
Microsoft Dynamics 365 Commerce version 10.0.15
10.0.0 to < publicationaffected
Microsoft Dynamics 365 Commerce version 10.0.16
10.0.0 to < publicationaffected