WID-SEC-W-2024-0362

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Azure: Mehrere Schwachstellen

view advisory published 2024-02-13

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und Daten falsch darzustellen.

01

describes (9)

Related CVEs.

IDseverity exploitable
CVE-2024-21403US——
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVE-2024-21401US——
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
CVE-2024-21397US——
Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVE-2024-21381US——
Microsoft Azure Active Directory B2C Spoofing Vulnerability
CVE-2024-21376US——
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
CVE-2024-21364US——
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2024-21329US——
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2024-20679USmedium6.5—
Azure Stack Hub Spoofing Vulnerability
CVE-2024-20667US——
Azure DevOps Server Remote Code Execution Vulnerability
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan