Описание
Microsoft 365 Copilot for Android Spoofing Vulnerability
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
FAQ
According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Word for Android | ||
| Microsoft Excel for Android | ||
| Microsoft PowerPoint for Android | ||
| Microsoft OneNote for Android | ||
| Microsoft 365 Copilot for Android | ||
| Microsoft Loop for Android |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
4.4 Medium
CVSS3
Связанные уязвимости
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.
Уязвимость интеллектуального виртуального помощника Microsoft 365 Copilot операционных систем Android, связанная с ошибками разграничения доступа, позволяющая нарушителю проводить спуфинг-атаки
EPSS
4.4 Medium
CVSS3