Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

A vulnerability in Microsoft Dynamics 365 (on-premises) version 9.1 allows unauthorized actors to disclose sensitive information over the network. This issue arises from improper handling of information, which could be exploited by clicking on a specially crafted URL that directs to a malicious site, where the attacker could execute queries to extract sensitive data.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information.

Remediation

Users can apply the official security update available through the Microsoft Update Catalog to address this vulnerability.