Lucene search
HistorySep 10, 2024 - 5:15 p.m.
CVE-2024-38194
azure web apps
improper authorization
privilege elevation
network exploitation
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
16.8%
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.
Affected configurations
Node
microsoftazure_web_appsMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | azure_web_apps | - | cpe:2.3:a:microsoft:azure_web_apps:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability
2024-09-10 16:54:21
cve
cve
CVE-2024-38194
2024-09-10 17:15:24
vulnrichment
vulnrichment
CVE-2024-38194 Azure Web Apps Elevation of Privilege Vulnerability
2024-09-10 16:54:21
mscve
mscve
Azure Web Apps Elevation of Privilege Vulnerability
2024-09-10 07:00:00
kaspersky
kaspersky
KLA73221 Multiple vulnerabilities in Microsoft Azure
2024-09-10 00:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday, September 2024 Security Update Review
2024-09-10 19:31:38
rapid7blog
rapid7blog
Patch Tuesday - September 2024
2024-09-10 20:49:21
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.001
Percentile
16.8%
Related for NVD:CVE-2024-38194