Skip to content
OpenAdvisories
High MSRC-CVE-2023-23408 1 CVE

Azure Apache Ambari Spoofing Vulnerability

Published Mar 14, 2023 · Updated Jun 16, 2023 · Revision 2

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker would have to send the victim a malicious URL that the victim would have to execute.

According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. Only users with roles “Cluster Admin” and “Cluster Operator” can access this.

Security updates
2302250400 — https://github.com/hdinsight/release-notes/releases

Vulnerabilities 1

Revision history

  1. #2

    Updated one or more CVSS scores for the affected products. This is an informational change only.

  2. #1

    Information published.

References