High WID-SEC-2024-2120 6 CVEs

Microsoft Azure: Mehrere Schwachstellen

Published Sep 10, 2024 · Updated Sep 10, 2024 · de-DE

Vendor: Microsoft Product: Azure Product: Azure Stack Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure Komponenten ausnutzen, um seine Privilegien zu erhöhen und beliebigen Code auszuführen.

Product

Azure ist eine Cloud Computing-Plattform von Microsoft.

Vulnerabilities 6

Critical 9.0

CVE-2024-38220

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

Microsoft Azure Stack Hub

Sep 10, 2024
High 8.8

CVE-2024-43469

Azure CycleCloud Remote Code Execution Vulnerability

Azure CycleCloud Remote Code Execution Vulnerability

Microsoft Azure CycleCloud 8.2.0 Azure CycleCloud 8.6.0 Azure CycleCloud 8.0.0

Sep 10, 2024
High 8.4

CVE-2024-38194

Azure Web Apps Elevation of Privilege Vulnerability

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

Microsoft Azure Web Apps

Sep 10, 2024
High 8.2

CVE-2024-38216

Azure Stack Hub Elevation of Privilege Vulnerability

Azure Stack Hub Elevation of Privilege Vulnerability

Microsoft Azure Stack Hub

Sep 10, 2024
High 7.3

CVE-2024-43470

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Microsoft Azure Network Watcher VM Extension

Sep 10, 2024
High 7.1

CVE-2024-38188

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Microsoft Azure Network Watcher VM Extension

Sep 10, 2024

Revision history

2024-09-10 #1
Initiale Fassung

References

Microsoft Leitfaden für Sicherheitsupdates vom 2024-09-10
https://msrc.microsoft.com/update-guide