Product:
Dynamics OmniChannel SDK Storage Containers
Summary
Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network. This vulnerability can lead to significant security risks, including unauthorized access to sensitive data and system controls. Organizations using this product should be aware of the potential for exploitation and take necessary precautions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-64655 |
Exploitation
To exploit this vulnerability, an attacker must have network access and can leverage the improper authorization to gain elevated privileges. This may involve sending specially crafted requests to the affected service, which could allow the attacker to perform actions that should be restricted. User interaction is required, making it essential for users to be cautious about the actions they take while using the application.
Affected Products
- Dynamics OmniChannel SDK Storage Containers: Affected by improper authorization, allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended that users apply the latest security updates provided by Microsoft. Additionally, organizations should review their access controls and ensure that proper authorization mechanisms are in place to prevent unauthorized access. Regular security assessments and user training can also help reduce the risk of exploitation.