143 matches found
KLA68916 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in Azure Storage Movement Client Library...
GO-2024-2861 azure-file-csi-driver leaks service account tokens in the logs in sigs.k8s.io/azurefile-csi-driver
azure-file-csi-driver leaks service account tokens in the logs in sigs.k8s.io/azurefile-csi-driver...
CVE-2024-3744 Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs
A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vault solutions. Tokens are only logged whe...
CVE-2024-3744 Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs
A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vault solutions. Tokens are only logged whe...
CVE-2024-3744 Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs
A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vault solutions. Tokens are only logged whe...
CVE-2024-3744
Azure-file-csi-driver may log service account tokens when TokenRequests is enabled and the driver runs at log level 2+. This could let an actor with log access exfiltrate tokens and potentially access cloud vault secrets. Affected versions are before 1.29.4 and 1.30.1; remediation involves upgrad...
Azure File CSI Driver 安全漏洞
The Azure File CSI Driver is a driver organized by the Kubernetes SIG. A security vulnerability exists in the Azure File CSI Driver that stems from the fact that a participant with access to the driver's logs can observe the service account token...
azure-file-csi-driver discloses service account tokens in logs
CVSS Rating: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - MEDIUM 6.5 A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to...
The vulnerability of the Microsoft Azure File Sync data synchronization service is related to deficiencies in access control. This allows attackers to circumvent existing security restrictions and enhance their privileges.
The vulnerability of the Microsoft Azure File Sync data synchronization service is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions and enhance their privileges...
Azure File Sync Agent v17.2 Release – February 2024 (KB5023055)
Update for Azure File Sync agent version 17.2.0.0. For more details, see the associated Microsoft Knowledge Base article...
CVE-2024-21397
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
Azure File Sync Agent v17.1 Release - February 2024 (Security-only update)
None None...
Azure File Sync Agent v16.2 Release - February 2024 (Security-only update)
None None...
Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)
Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)
Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)
Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Microsoft Azure Security Vulnerabilities
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure File Sync. The following products and versions are affected: Azure File Sync v17.0,Azure File Sync v16.0,Azure Fil...
PT-2024-1885 · Microsoft · Azure File Sync
Name of the Vulnerable Software and Affected Versions: Microsoft Azure File Sync affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft Azure File Sync service, which can be exploited to bypass existing security limitations and eleva...
SUSE CVE-2019-11252
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes...