← Database

CVE-2024-43477

HIGH CVSS: 7.5 Published: 2024-08-23 Modified: 2026-06-17

Description

Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.

Affected Platforms

Microsoft Entra Id

Weakness Type

CWE-284, NVD-CWE-Other

References