PT-2020-2239 · Microsoft · Dynamics Business Central+2

Published 2020-04-14 · Updated 2021-07-21 · CVE-2020-1022

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 versions (affected versions not specified) Microsoft Dynamics NAV versions (affected versions not specified) Microsoft Dynamics Business Central versions (affected versions not specified)

Description The issue is related to incorrect neutralization of special elements in output used by an incoming component, which can allow a remote attacker to execute arbitrary code.

Recommendations For Microsoft Dynamics 365, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Dynamics NAV, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Dynamics Business Central, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2020-02156

CVE-2020-1022

Affected Products

Dynamics 365

Dynamics Business Central

Dynamics Nav

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-1022 · Security Note
• https://bdu.fstec.ru/vul/2020-02156 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1022 · Vendor Advisory
• https://t.me/cvenotify/2785 · Telegram Post