Description
An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure Health Bot | N/A | — |
Advisories 3
- WID-SEC-2024-1822 Microsoft Azure: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 13, 2024
- NCSC-2024-0335 Kwetsbaarheden verholpen in Microsoft Azure componenten NCSC-NL (Netherlands) · Aug 13, 2024
- MSRC-CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability Microsoft Security Response Center · Aug 13, 2024
References
- Azure Health Bot Elevation of Privilege Vulnerability vendor-advisory