—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT Security Bulletin
ASB-2023.0124
Microsoft Patch Tuesday update for Microsoft Dynamics for July 2023
12 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: Microsoft Dynamics
Operating System: Windows
Resolution: Patch/Upgrade
CVE Names: CVE-2023-35335 CVE-2023-33171 CVE-2023-32052
Comment: CVSS (Max): 8.2 CVE-2023-33171 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)
CVSS Source: Microsoft
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
OVERVIEW
Microsoft has released its monthly security patch update for the
month of July 2023.
This update resolves 3 vulnerabilities across the following
product(s): [1]
Microsoft Dynamics 365 (on-premises) version 9.0
Microsoft Dynamics 365 (on-premises) version 9.1
Microsoft Power Apps (online)
IMPACT
Microsoft has given the following details regarding these vulnerabilities.
Details Impact Severity
CVE-2023-32052 Spoofing Important
CVE-2023-33171 Spoofing Important
CVE-2023-35335 Spoofing Important
MITIGATION
Microsoft recommends updating the software with the version made
available on the Microsoft Update Catalogue for the following
Knowledge Base articles. [1].
KB5026500, KB5026501
REFERENCES
[1] Microsoft Security Update Guidance
https://portal.msrc.microsoft.com/en-us/security-guidance
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation’s site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=tbkt
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins