Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-35255US | — | — | ||
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | ||||
references
External citations — patches, advisories, analysis.
- CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - CSAFself
- CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - HTMLself
- Microsoft Support Lifecycleexternal
- Common Vulnerability Scoring Systemexternal
- Microsoft Exploitability Indexexternal
remediations (9)
- FixedAzure Identity Library for .NET
1.11.4:Security Update:https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md - FixedAzure Identity Library for C++
1.8.0:Security Update:https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/CHANGELOG.md - FixedAzure Identity Library for Go
1.6.0:Security Update:https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/azidentity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/azidentity/CHANGELOG.md - FixedAzure Identity Library for Java
1.12.2:Security Update:https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/identity/azure-identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/identity/azure-identity/CHANGELOG.md - FixedAzure Identity Library for JavaScript
4.2.1:Security Update:https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md - FixedAzure Identity Library for Python
1.16.1:Security Update:https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/identity/azure-identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/identity/azure-identity/CHANGELOG.md - FixedMicrosoft Authentication Library (MSAL) for .NET
4.61.3:Security Update:https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/CHANGELOG.md
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/CHANGELOG.md - FixedMicrosoft Authentication Library (MSAL) for Java
1.15.1:Security Update:https://github.com/AzureAD/microsoft-authentication-library-for-java
https://github.com/AzureAD/microsoft-authentication-library-for-java - FixedMicrosoft Authentication Library (MSAL) for Node.js
2.9.2:Security Update:https://github.com/AzureAD/microsoft-authentication-library-for-js#readme
https://github.com/AzureAD/microsoft-authentication-library-for-js#readme
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan