Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.
What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process. How could an attacker exploit this vulnerability? An authenticated attacker with low privileges could send specially crafted requests to write files to locations accessible to the affected web application. Successful exploitation could allow the attacker to gain the privileges of the application-pool identity or compromise other users’ sessions.
Nolan Hayes