KLA68916 Multiple vulnerabilities in Microsoft Azure

🗓️ 11 Jun 2024 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 38 Views

Multiple vulnerabilities in Microsoft Azure. Malicious users can exploit them to gain privileges or cause denial of service. Vulnerabilities include elevation of privilege in Azure Science Virtual Machine, Microsoft Azure File Sync, Azure Monitor Agent, and Azure Identity Libraries. Also, denial of service vulnerability in Azure Storage Movement Client Library.

Reporter	Title	Published	Views	Family All 307
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF001	31 Jul 202409:07	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Microsoft.BotBuilder affects IBM Robotic Process Automation which may result in elevated privileges (CVE-2024-35255).	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a local authenticated attack and denial of service due to Microsoft Azure Identity Libraries and Microsoft Authentication Library and gRPC on Node.js (CVE-2024-35255, CVE-2024-37168)	22 Jul 202415:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in .NET affect IBM Robotic Process Automation	16 Jan 202616:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana using third-party Kubernetes Operators is affected by Multiple Security Vulnerabilities	23 Oct 202415:56	–	ibm
IBM Security Bulletins	Security Bulletin: vulnerability in Microsoft Azure Identity affects IBM Workload Scheduler.	13 Nov 202410:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Microsoft Azure Identity Libraries and Microsoft Authentication Library affects watsonx.data	30 Jan 202514:56	–	ibm
FreeBSD	traefik -- Azure Identity Libraries Elevation of Privilege Vulnerability	11 Jun 202400:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2024-708)	9 Sep 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2024-2630)	9 Sep 202400:00	–	nessus

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37325
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35253
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35254
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35252
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29187
threats	www.threats.kaspersky.com/en/product/Microsoft-Windows/
threats	www.threats.kaspersky.com/en/product/Microsoft-Windows-Server/
threats	www.threats.kaspersky.com/en/product/Microsoft-Azure/
threats	www.threats.kaspersky.com/en/product/.NET/

19 May 2025 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.1

EPSS0.05402

SSVC