Vulnerabilities fixed in Microsoft Azure components

🗓️ 13 Aug 2024 18:20:23Reported by NCSCType

Microsoft fixed Azure component vulnerabilities enabling privilege escalation or impersonation, with required prior access or phishing.

Reporter	Title	Published	Views	Family All 69
BDU FSTEC	The vulnerability of the integrated Azure Stack Hub hybrid cloud computing system, related to insufficient validation of input data, allows attackers to escalate their privileges.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure Health Bot, a tool for creating and deploying intelligent chatbots in the healthcare sector, lies in the insufficient verification of incoming requests. This allows attackers to increase their privileges.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the integrated Azure Stack Hub hybrid cloud computing system, related to the lack of security measures for the web page structure, allows attackers to perform spoofing attacks.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows a perpetrator to escalate their privileges.	26 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-38098	13 Aug 202418:05	–	circl
Circl	CVE-2024-38108	13 Aug 202418:05	–	circl
Circl	CVE-2024-38109	13 Aug 202418:05	–	circl
Circl	CVE-2024-38162	13 Aug 202418:05	–	circl
Circl	CVE-2024-38195	13 Aug 202418:05	–	circl
Circl	CVE-2024-38201	13 Aug 202418:05	–	circl