CVE Details: CVE-2024-38190

Description

Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector.

Published Date: 2024-10-15
Last Modified Date: 2024-10-16
Severity: HIGH
CVSS v3 Score: 8.6
CWE ID: CWE-862
Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: NONE
User Interaction: NONE
Scope: CHANGED
Confidentiality Impact: HIGH
Integrity Impact: NONE
Availability Impact: NONE

Back to CVE List