High · 7.8 CVE-2022-38007 EUVD-2022-40614GHSA-pmmp-33fg-6g8f

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability

Published Sep 13, 2022 · Updated Mar 11, 2025 · Assigned by microsoft

Vendor: Microsoft Product: Azure ARC Product: Azure Guest Configuration

Description

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Azure Guest Configuration	1.0 – < V1.21	V1.21
Microsoft	Azure ARC	1.0.0 – < 1.22	1.22

Advisories 1

MSRC-CVE-2022-38007 Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability Microsoft Security Response Center · Sep 13, 2022

References

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability vendor-advisory