CVE-2024-43612

Summary

CVE-2024-43612 is a newly disclosed vulnerability affecting Power BI Report Server. Hackers can exploit this spoofing weakness to deceive users into believing they are interacting with legitimate reports, potentially leading to unintended actions or data disclosure. This issue could pose a significant risk to organizations that rely on Power BI for critical data analysis and decision-making, as it bypasses authentication controls and impersonates trusted reports. Microsoft is currently working on a patch to address this vulnerability and recommends users apply the fix as soon as it becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.