CVE-2024-49035

Summary dbcve.org

This is an improper access control vulnerability in Microsoft's partner portal (Partner.Microsoft.com) that allows an unauthenticated attacker to gain elevated privileges over the network. The vulnerability stems from a failure to properly enforce authentication and authorization checks on certain endpoints or functionality, enabling remote privilege escalation without any valid credentials.

Mitigation

Apply Microsoft's security update for this vulnerability once released; until then, monitor for suspicious unauthorized access attempts to Partner.Microsoft.com and restrict network exposure where possible.