Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-35255US | — | — | ||
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - CSAFself
- CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability - HTMLself
- Microsoft Support Lifecycleexternal
- Common Vulnerability Scoring Systemexternal
- Microsoft Exploitability Indexexternal
Behebungen (9)
- BehobenAzure Identity Library for .NET
1.11.4:Security Update:https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md - BehobenAzure Identity Library for C++
1.8.0:Security Update:https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-cpp/blob/main/sdk/identity/azure-identity/CHANGELOG.md - BehobenAzure Identity Library for Go
1.6.0:Security Update:https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/azidentity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-go/blob/main/sdk/azidentity/CHANGELOG.md - BehobenAzure Identity Library for Java
1.12.2:Security Update:https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/identity/azure-identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/identity/azure-identity/CHANGELOG.md - BehobenAzure Identity Library for JavaScript
4.2.1:Security Update:https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md - BehobenAzure Identity Library for Python
1.16.1:Security Update:https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/identity/azure-identity/CHANGELOG.md
https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/identity/azure-identity/CHANGELOG.md - BehobenMicrosoft Authentication Library (MSAL) for .NET
4.61.3:Security Update:https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/CHANGELOG.md
https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/blob/main/CHANGELOG.md - BehobenMicrosoft Authentication Library (MSAL) for Java
1.15.1:Security Update:https://github.com/AzureAD/microsoft-authentication-library-for-java
https://github.com/AzureAD/microsoft-authentication-library-for-java - BehobenMicrosoft Authentication Library (MSAL) for Node.js
2.9.2:Security Update:https://github.com/AzureAD/microsoft-authentication-library-for-js#readme
https://github.com/AzureAD/microsoft-authentication-library-for-js#readme
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan