KLA11883 ACE vulnerability in Microsoft Azure

A cross-site-scripting (XSS) vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

CVE-2018-8652

Related products

Microsoft-Windows

Microsoft-Azure

CVE list

CVE-2018-8652 warning

KB list

4480788

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Windows Azure Pack Rollup 13.1