The vulnerability of the Azure Guest Configuration component of the Azure Policy creation, assignment, and definition management service, along with the Azure Arc management platform, is related to deficiencies in access control. This allows attackers to escalate their privileges.

Azure Policy and Azure Arc Guest Configuration flaw enables privilege escalation due to weak access control.

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2022-38007	13 Sep 202219:15	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday September 2022: CLFS Driver EoP, IP packet causes RCE, Windows DNS Server DoS, Spectre-BHB	23 Sep 202222:44	–	avleonov
Circl	CVE-2022-38007	13 Sep 202222:31	–	circl
CNNVD	Microsoft Azure 安全漏洞	13 Sep 202200:00	–	cnnvd
CVE	CVE-2022-38007	13 Sep 202218:42	–	cve
Cvelist	CVE-2022-38007 Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability	13 Sep 202218:42	–	cvelist
EUVD	EUVD-2022-40614	3 Oct 202520:07	–	euvd
Kaspersky	KLA19244 PE vulnerability in Microsoft Azure	13 Sep 202200:00	–	kaspersky
Microsoft CVE	Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability	13 Sep 202207:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Azure	13 Sep 202200:00	–	ncsc