KLA65507 Multiple vulnerabilities in Microsoft Azure

🗓️ 09 Apr 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 25 Views

Multiple vulnerabilities in Microsoft Azure. Malicious users can exploit to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Install necessary updates from the KB sectio

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: A vulnerability in Azure Identity Library for .NET affects IBM Robotic Process Automation and may result in a locally authenticated attacker obtaining sensitive information (CVE-2024-29992)	31 Jul 202418:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in .NET affect IBM Robotic Process Automation	16 Jan 202616:39	–	ibm
Tenable Nessus	Microsoft Azure CLI Confcom Extension < 0.3.4 Privilege Escalation	2 May 202400:00	–	nessus
Tenable Nessus	Microsoft Azure Migrate Auto Update < 6.1.294.1003 RCE	15 Apr 202400:00	–	nessus
Tenable Nessus	Security Updates for Azure CycleCloud (April 2024)	10 Apr 202400:00	–	nessus
BDU FSTEC	The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential classes in the Azure Identity Library for .NET allows a perpetrator to gain unauthorized access to protected information.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 5G Azure Private 5G Core (AP5GC) network management tool, related to errors in processing input data length parameters, allows a attacker to trigger a service failure.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Migrate data transfer service, related to incorrect authentication, allows a perpetrator to execute arbitrary code.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure AI Search search engine, related to the use of pre-installed credentials, allows a perpetrator to disclose protected information.	16 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows a perpetrator to escalate their privileges.	16 Apr 202400:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29990
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26193
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20685
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21424
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29989
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28917
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29063
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29993
threats	www.threats.kaspersky.com/en/product/Microsoft-Azure/

26 Mar 2025 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19

EPSS0.18008

SSVC