High WID-SEC-2024-0838 9 CVEs

Microsoft Azure: Mehrere Schwachstellen

Published Apr 9, 2024 · Updated Apr 9, 2024 · de-DE

Vendor: Microsoft Product: Azure Platform: Windows

Summary

Ein Angreifer kann diese Schwachstellen in Azure ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.

Vulnerabilities 9

Critical 9.0

CVE-2024-29990 EPSS 18%

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service

Apr 9, 2024
High 8.8

CVE-2024-29993

Azure CycleCloud Elevation of Privilege Vulnerability

Azure CycleCloud Elevation of Privilege Vulnerability

Microsoft Azure CycleCloud 8.6.0

Apr 9, 2024
High 8.4

CVE-2024-29989

Azure Monitor Agent Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

Microsoft Azure Monitor

Apr 9, 2024
High 7.3

CVE-2024-29063

Azure AI Search Information Disclosure Vulnerability

Azure AI Search Information Disclosure Vulnerability

Microsoft Azure AI Search

Apr 9, 2024
Medium 6.5

CVE-2024-21424

Azure Compute Gallery Elevation of Privilege Vulnerability

Azure Compute Gallery Elevation of Privilege Vulnerability

Microsoft Azure Compute Gallery

Apr 9, 2024
Medium 6.4

CVE-2024-26193

Azure Migrate Remote Code Execution Vulnerability

Azure Migrate Remote Code Execution Vulnerability

Microsoft Azure Migrate

Apr 9, 2024
Medium 6.2

CVE-2024-28917

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

Microsoft Azure Arc Extension

Apr 9, 2024
Medium 5.9

CVE-2024-20685

Azure Private 5G Core Denial of Service Vulnerability

Azure Private 5G Core Denial of Service Vulnerability

Microsoft Azure Private 5G Core

Apr 9, 2024
Medium 5.5

CVE-2024-29992

Azure Identity Library for .NET Information Disclosure Vulnerability

Azure Identity Library for .NET Information Disclosure Vulnerability

Microsoft Azure Identity Library for .NET Azure.Identity NuGet

Apr 9, 2024

Revision history

2024-04-09 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2024-04-09
https://msrc.microsoft.com/update-guide