KLA62826 Multiple vulnerabilities in Microsoft Azure

Detect date:

01/09/2024

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Affected products:

Microsoft Identity Model v7.0.0
Microsoft Identity Model v7.0.0 for Nuget
Microsoft Identity Model v6.0.0 for Nuget
Azure Storage Mover Agent
Microsoft Identity Model v5.0.0
Microsoft Identity Model v6.0.0
Microsoft Identity Model v5.0.0 for Nuget

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2024-20676
CVE-2024-21319

Impacts:

ACE

Related products:

Microsoft Azure

CVE-IDS:

CVE-2024-213196.8High
CVE-2024-206768.0Critical