Critical WID-SEC-2024-0612 6 CVEs

Microsoft Azure: Mehrere Schwachstellen

Published Mar 12, 2024 · Updated May 1, 2024 · Revision 2 · de-DE

Vendor: IBM Vendor: Microsoft Product: Azure Product: QRadar SIEM Platform: Windows

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und Informationen falsch darzustellen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.

Vulnerabilities 6

Critical 9.8

CVE-2024-21334 EPSS 20%

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft Open Management Infrastructure System Center Operations Manager (SCOM) 2022 System Center Operations Manager (SCOM) 2019

Mar 12, 2024
Critical 9.0

CVE-2024-21400

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service

Mar 12, 2024
High 7.8

CVE-2024-21330

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

Microsoft Azure HDInsight Open Management Infrastructure Azure Automation Update Management

Mar 12, 2024
High 7.8

CVE-2024-21418

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

Microsoft Software for Open Networking in the Cloud (SONiC)

Mar 12, 2024
High 7.5

CVE-2024-21421

Azure SDK Spoofing Vulnerability

Azure SDK Spoofing Vulnerability

Microsoft Azure SDK

Mar 12, 2024
High 7.3

CVE-2024-26203

Azure Data Studio Elevation of Privilege Vulnerability

Azure Data Studio Elevation of Privilege Vulnerability

Microsoft Azure Data Studio

Mar 12, 2024

Revision history

2024-05-01 #2
Neue Updates von IBM aufgenommen
2024-03-12 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2024-03-12
https://msrc.microsoft.com/update-guide
IBM Security Bulletin 7149967 vom 2024-05-01
https://www.ibm.com/support/pages/node/7149967