CVE-2024-43477

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Aug 23, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-434798.5Microsoft Power Automate Desktop Remote Code Execution VulnerabilityCVE-2024-43484.3A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-prCVE-2024-434806.6Azure Service Fabric for Linux Remote Code Execution VulnerabilityCVE-2024-434818.8Power BI Report Server Spoofing VulnerabilityCVE-2024-434826.5Microsoft Outlook for iOS Information Disclosure VulnerabilityCVE-2024-434837.5.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2024-434847.5.NET, .NET Framework, and Visual Studio Denial of Service VulnerabilityCVE-2024-434857.5.NET and Visual Studio Denial of Service VulnerabilityCVE-2024-434876.5Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-434889.8Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remotCVE-2024-434898.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-43497.3A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected by this vulnerabili