KLA12258 Multiple vulnerabilities in Microsoft Azure

🗓️ 10 Aug 2021 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 47 Views

Multiple vulnerabilities in Microsoft Azure. Malicious users can exploit to bypass security restrictions, obtain sensitive information, gain privileges, cause denial of servic

Reporter	Title	Published	Views	Family All 70
GithubExploit	Exploit for Improper Authentication in Microsoft	14 Aug 202121:05	–	githubexploit
Tenable Nessus	Microsoft Azure CycleCloud Privilege Escalation (CVE-2021-33762)	13 Aug 202100:00	–	nessus
Tenable Nessus	Microsoft Azure CycleCloud Privilege Escalation (CVE-2021-36943)	13 Aug 202100:00	–	nessus
Tenable Nessus	Security Update for Microsoft Azure Active Directory Connect (August 2021)	10 Aug 202100:00	–	nessus
BDU FSTEC	The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows attackers to escalate their privileges.	18 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Azure Sphere operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.	20 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Azure Sphere operating systems, related to deficiencies in access control, allows attackers to escalate their privileges.	20 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Sphere operating system, related to insufficient validation of input data, allows a hacker to trigger a service failure.	1 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows attackers to escalate their privileges.	8 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Azure Active Directory Connect Provisioning Agent and Azure Active Directory Connect, related to authentication mechanism flaws, allow attackers to bypass security measures.	8 Sep 202100:00	–	bdu_fstec

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36949
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26428
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26429
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36943
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33762
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26430
threats	www.threats.kaspersky.com/en/product/Microsoft-Active-Directory/
threats	www.threats.kaspersky.com/en/product/Microsoft-Azure/
statistics	www.statistics.securelist.com/

31 Mar 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 24.9

CVSS 3.17.7 - 7.8

EPSS0.01204