Description
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows Admin Center | 1809.0 – < 2.4.2.1 | 2.4.2.1 |
| Microsoft | Windows Admin Center in Azure Portal | 1.0 – < 0.45.0.0 | 0.45.0.0 |
Advisories 4
- WID-SEC-2025-0744 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2025
- MSRC-CVE-2025-29819 Windows Admin Center in Azure Portal Information Disclosure Vulnerability Microsoft Security Response Center · Jul 22, 2025
- WID-SEC-2025-0749 Microsoft Azure: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 20, 2025
- NCSC-2025-0109 Kwetsbaarheden verholpen in Microsoft Azure NCSC-NL (Netherlands) · Apr 8, 2025
References
- Windows Admin Center in Azure Portal Information Disclosure Vulnerability vendor-advisory patch