CVE-2024-21380
Assigner: microsoft
Published: 2024-02-13T18:02:43.563Z
State: PUBLISHED
title: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
datePublic: 2024-02-13T08:00:00+00:00
affected: vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2022 Release Wave 2
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2022:release_wave_2:*:*:*:*:*:*
platforms: Unknown
versions: version: 21.0.0
lessThan: Application Build 21.16.63199, Platform Build 21.0
versionType: custom
status: affected
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2023 Release Wave 1
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2023:release_wave_1:*:*:*:*:*:*
platforms: Unknown
versions: version: 22.0.0
lessThan: Application Build 22.10.63195, Platform Build 22.0
versionType: custom
status: affected
vendor: Microsoft
product: Microsoft Dynamics 365 Business Central 2023 Release Wave 2
cpes: cpe:2.3:a:microsoft:dynamics_365_business_central:2023:release_wave_2:*:*:*:*:*:*
platforms: Unknown
versions: version: 23.0.0
lessThan: Application Build 23.4.15715, Platform Build 23.0.
versionType: custom
status: affected
descriptions: value: Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
problemTypes: descriptions: description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
type: CWE
cweId: CWE-200
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseSeverity: HIGH
baseScore: 8
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C