CVE-2022-41066 Microsoft Dynamics Business Central Information Disclosure Vulnerability
An attacker can access sensitive information in Microsoft Dynamics Business Central, requiring a patch to mitigate the risk.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-41066?
CVE-2022-41066 is a medium-severity vulnerability in Microsoft Dynamics 365 Business Central Spring 2019 Update, published on 9 Nov 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Microsoft Dynamics Business Central Information Disclosure Vulnerability
Which versions are affected by CVE-2022-41066?
It affects 4 products.
Products include Microsoft Dynamics 365 Business Central 2019, Microsoft Dynamics 365 Business Central 2021, Microsoft Dynamics 365 Business Central 2022, Microsoft Dynamics Nav.
How do I fix CVE-2022-41066?
No fix has been published for CVE-2022-41066 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-41066 being exploited?
There is no known exploitation of CVE-2022-41066 in the wild and no public exploit code.
Sources
Also known as GHSA-33m5-rgm6-r8x3.