KLA12258 Multiple vulnerabilities in Microsoft Azure

Detect date:

08/10/2021

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service.

Affected products:

Microsoft Azure Active Directory Connect 2.0.X.Y
Azure Active Directory Connect Provisioning Agent
Azure Sphere
Azure CycleCloud 8.2.0

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-36949
CVE-2021-26428
CVE-2021-26429
CVE-2021-36943
CVE-2021-33762
CVE-2021-26430

Impacts:

OSI

Related products:

Microsoft Active Directory