CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-26
Microsoft Partner Portal (Partner.Microsoft.com) Privilege Escalation Vulnerability (CVE-2024-49035) Security Advisory
[Affected Scope] Microsoft Partner Center Portal (Partner.Microsoft.com) services and associated API endpoints
[Impact] An unauthenticated remote attacker can elevate privileges over the network, potentially gaining administrative control over partner accounts and sensitive tenant data
[Mitigation] As this is a cloud-hosted service, Microsoft has applied server-side mitigations; however, organizations must immediately audit Partner Center API integrations, permissions, and admin logs