VDB
CVE-2024-43477
CVE-2024-43477
PUBLISHED
CVSS 7.5 HIGH
Improper access control in Decentralized Identity Services allows an unathenticated attacker to disable Verifiable ID's on another tenant.
EPSS 1.04% · 61.7th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
EPSS Score
1.04%
61.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | microsoft_entra_id | N/A, N/A |
| Microsoft | Microsoft Entra | N/A, N/A |
| microsoft | entra_id |
Timeline
- Aug 13, 2024 CVE Published
- Aug 23, 2024 EPSS Score
- Aug 23, 2024 CVE Updated
- Aug 23, 2024 PoC Published
- Sep 13, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 24, 2024 EPSS Score
- Nov 14, 2024 EPSS Score
- Dec 26, 2024 EPSS Score
- Jan 9, 2025 PoC Published
- Jan 16, 2025 EPSS Score
- Feb 5, 2025 EPSS Score