Lucene search
MicrosoftMS:CVE-2024-38194HistorySep 10, 2024 - 7:00 a.m.
Azure Web Apps Elevation of Privilege Vulnerability
2024-09-1007:00:00
Microsoft
msrc.microsoft.com
3
azure
web apps
elevation
privilege
vulnerability
authentication
improper authorization
network
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
16.8%
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
Related
cve
cve
CVE-2024-38194
2024-09-10 17:15:24
vulnrichment
vulnrichment
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability
2024-09-10 16:54:21
nvd
nvd
CVE-2024-38194
2024-09-10 17:15:24
cvelist
cvelist
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability
2024-09-10 16:54:21
kaspersky
kaspersky
KLA73221 Multiple vulnerabilities in Microsoft Azure
2024-09-10 00:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, September 2024 Security Update Review
2024-09-10 19:31:38
rapid7blog
rapid7blog
Patch Tuesday - September 2024
2024-09-10 20:49:21
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.001
Percentile
16.8%
Related for MS:CVE-2024-38194