CVE-2025-24989

Produto

Microsoft / Power Pages

Vulnerabilidade

Microsoft Power Pages Improper Access Control Vulnerability

Adicionado ao KEV

21 de fev. de 2025

Corrigir até

14 de mar. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

Ação necessária

Apply mitigations per vendor instructions, follow BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24989 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24989