CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in AlexaCRM Dynamics 365 Integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dynamics 365 Integration: from n/a through 1.3.12.
Explanation of Vulnerability in Simple Terms
AlexaCRM Dynamics 365 Integration versions up to 1.3.12 lack proper authorization checks, allowing authenticated users to read and modify data they should not have access to. An attacker with low-privilege credentials can view or alter sensitive information without additional interaction. The vulnerability affects confidentiality and integrity but not availability.
What an attacker can do
Read and modify data belonging to other users or restricted areas of the integration.
Potential impact on your site
Unauthorized data access and modification by authenticated users; potential exposure of sensitive Dynamics 365 information.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the system.
Key dates
External resources
Related vulnerabilities
