Summary
Impact: Information Disclosure. Microsoft rating: Critical. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What type of information could be disclosed by this vulnerability?
System internal configuration could be disclosed by this vulnerability.
What should users do to protect themselves?
Users can follow the instructions in the release notes to update the Azure Stack Hub environment to latest version 1.2501.1.47.
There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.
Security updates
1.2408.1.50 — https://learn.microsoft.com/en-us/azure-stack/operator/hotfix-1-2408-1-50?view=azs-2501
1.2406.1.23 — https://learn.microsoft.com/en-us/azure-stack/operator/hotfix-1-2406-1-23?view=azs-2406
1.2501.1.47 — https://learn.microsoft.com/en-us/azure-stack/operator/hotfix-1-2501-1-47?view=azs-2501
Vulnerabilities 1
-
High 7.5
Azure Stack Hub Information Disclosure Vulnerability
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
Revision history
-
#1
Information published.
References
-
CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53793
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss