WID-SEC-W-2024-0838

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Azure: Mehrere Schwachstellen

view advisory published 2024-04-09

Ein Angreifer kann diese Schwachstellen in Azure ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.

01

describes (9)

Related CVEs.

IDseverity exploitable
CVE-2024-29993US——
Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2024-29992US——
Azure Identity Library for .NET Information Disclosure Vulnerability
CVE-2024-29990UScritical9.0—
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVE-2024-29989US——
Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-29063USmedium5.5OT elevated—
Azure AI Search Information Disclosure Vulnerability
CVE-2024-28917US——
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
CVE-2024-26193US——
Azure Migrate Remote Code Execution Vulnerability
CVE-2024-21424US——
Azure Compute Gallery Elevation of Privilege Vulnerability
CVE-2024-20685US——
Azure Private 5G Core Denial of Service Vulnerability
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan