coldbraid

CVE-2024-49035 Microsoft Partner Center

Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.

CVSS
not scored

CWE-269

On CISA’s exploited list

Microsoft Partner Center Improper Access Control Vulnerability

Added
2025-02-25
Federal patch deadline
2025-03-18
Ransomware use
not known