Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12582
HistoryJul 12, 2022 - 12:00 a.m.

KLA12582 Multiple vulnerabilities in Microsoft Azure

2022-07-1200:00:00
Kaspersky Lab
threats.kaspersky.com
11

8.3 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

7.9 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.6%

JSON

Detect date:

07/12/2022

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information.

Affected products:

Azure Storage Queues client library for Python
Azure Storage Blobs client library for Java
Azure Site Recovery VMWare to Azure
Azure Storage Queues client library for .NET
Azure Storage Blobs client library for .NET

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2022-33676
CVE-2022-33666
CVE-2022-33660
CVE-2022-33672
CVE-2022-33643
CVE-2022-33667
CVE-2022-33664
CVE-2022-33661
CVE-2022-33658
CVE-2022-33657
CVE-2022-33659
CVE-2022-33673
CVE-2022-30187
CVE-2022-33653
CVE-2022-33669
CVE-2022-33650
CVE-2022-33674
CVE-2022-33665
CVE-2022-33656
CVE-2022-33641
CVE-2022-33642
CVE-2022-33662
CVE-2022-33675
CVE-2022-30181
CVE-2022-33663
CVE-2022-33655
CVE-2022-33671
CVE-2022-33678
CVE-2022-33668
CVE-2022-33654
CVE-2022-33652
CVE-2022-33651
CVE-2022-33677

Impacts:

ACE

Related products:

Microsoft Azure

CVE-IDS:

CVE-2022-336767.2High
CVE-2022-336666.5High
CVE-2022-336604.9Warning
CVE-2022-336726.5High
CVE-2022-336436.5High
CVE-2022-336676.5High
CVE-2022-336644.9Warning
CVE-2022-336616.5High
CVE-2022-336584.9Warning
CVE-2022-336576.5High
CVE-2022-336594.9Warning
CVE-2022-336736.5High
CVE-2022-301874.7Warning
CVE-2022-336534.9Warning
CVE-2022-336694.9Warning
CVE-2022-336504.9Warning
CVE-2022-336748.3Critical
CVE-2022-336656.5High
CVE-2022-336566.5High
CVE-2022-336416.5High
CVE-2022-336424.9Warning
CVE-2022-336626.5High
CVE-2022-336757.8Critical
CVE-2022-301816.5High
CVE-2022-336636.5High
CVE-2022-336556.5High
CVE-2022-336714.9Warning
CVE-2022-336787.2High
CVE-2022-336684.9Warning
CVE-2022-336544.9Warning
CVE-2022-336524.9Warning
CVE-2022-336514.9Warning
CVE-2022-336777.2High

Microsoft official advisories:

References

Related

nessus 2
mscve 33
rapid7blog 1
prion 33
cnvd 32
cve 33
kaspersky 1
msrc 3
gitlab 2
ubuntucve 1
github 1
osv 1
avleonov 1
ibm 1
nessus
nessus
Security Updates for Microsoft Azure Site Recovery (July 2022)
2022-08-30 00:00:00
SUSE SLES15 Security Update : python-azure-storage-queue (SUSE-SU-2023:4609-1)
2023-11-29 00:00:00
mscve
mscve
Azure Site Recovery Remote Code Execution Vulnerability
2022-07-12 07:00:00
Azure Site Recovery Elevation of Privilege Vulnerability
2022-07-12 07:00:00
Azure Site Recovery Elevation of Privilege Vulnerability
2022-07-12 07:00:00
rapid7blog
rapid7blog
Patch Tuesday - July 2022
2022-07-12 19:40:15
prion
prion
Privilege escalation
2022-07-12 23:15:00
Privilege escalation
2022-07-12 23:15:00
Privilege escalation
2022-07-12 23:15:00
cnvd
cnvd
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-56596)
2022-07-13 00:00:00
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-57199)
2022-07-13 00:00:00
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-57194)
2022-07-13 00:00:00
cve
cve
CVE-2022-33659
2022-07-12 23:15:00
CVE-2022-33663
2022-07-12 23:15:00
CVE-2022-33669
2022-07-12 23:15:00
kaspersky
kaspersky
KLA12585 OSI vulnerability in Microsoft Dynamics
2022-07-12 00:00:00
msrc
msrc
Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability
2022-07-18 07:00:00
Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability
2022-07-18 13:40:00
Mitigation for Azure Storage SDK Client-Side Encryption Padding Oracle Vulnerability
2022-07-18 07:00:00
gitlab
gitlab
Exposure of Resource to Wrong Sphere
2022-07-13 00:00:00
Exposure of Resource to Wrong Sphere
2022-07-13 00:00:00
ubuntucve
ubuntucve
CVE-2022-30187
2022-07-12 00:00:00
github
github
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
2022-07-13 00:00:39
osv
osv
Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
2022-07-13 00:00:39
avleonov
avleonov
Microsoft Patch Tuesday July 2022: propaganda report, CSRSS EoP, RPC RCE, Edge, Azure Site Recovery
2022-07-23 08:34:29
ibm
ibm
Security Bulletin: IBM Disconnected Log Collector is vulnerable to using components with known vulnerabilities
2023-09-29 18:56:17

8.3 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

7.9 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.6%

JSON
Related for KLA12582
nessus2mscve33rapid7blog1prion33cnvd32cve33kaspersky1msrc3gitlab2ubuntucve1github1osv1avleonov1ibm1