Description
Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Entra | N/A | — |
Advisories 1
- MSRC-CVE-2024-43477 Microsoft Entra ID Elevation of Privilege Vulnerability Microsoft Security Response Center · Aug 22, 2024
References
- Microsoft Entra ID Elevation of Privilege Vulnerability vendor-advisory