Description
<p>An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Commerce. An unauthenticated attacker who successfully exploited this vulnerability could update data without proper authorization.</p>
<p>To exploit the vulnerability, an attacker would need to send a specially crafted request to an affected server.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Dynamics 365 Commerce performs authorization checks.</p>
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Dynamics 365 Commerce version 10.0.12 | 10.0.0 – < publication | publication |
| Microsoft | Dynamics 365 Commerce version 10.0.13 | 10.0.0 – < publication | publication |
| Microsoft | Dynamics 365 Commerce version 10.0.14 | 10.0.0 – < publication | publication |
| Microsoft | Dynamics 365 Commerce version 10.0.15 | 10.0.0 – < publication | publication |
| Microsoft | Dynamics 365 Commerce version 10.0.16 | 10.0.0 – < publication | publication |