Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-5674A86D3224008690B6932FFFE1C389Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.8%
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| go/github.com/azure/azure-sdk-for-go/sdk/azidentity | lt | 1.6.0 |
References
github.com/advisories/GHSA-m5vv-6r4h-3vj9
github.com/Azure/azure-sdk-for-go/commit/50774cd9709905523136fb05e8c85a50e8984499
github.com/Azure/azure-sdk-for-js/commit/c6aa75d312ae463e744163cedfd8fc480cc8d492
github.com/Azure/azure-sdk-for-python/commit/cb065acd7d0f957327dc4f02d1646d4e51a94178
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255
nvd.nist.gov/vuln/detail/CVE-2024-35255
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.8%