113 matches found
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential classes in the Azure Identity Library for .NET allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential classes in the Azure Identity Library for .NET relates to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Information Exposure Through an Error Message
Overview Affected versions of this package are vulnerable to Information Exposure Through an Error Message due to improper handling of sensitive information. An attacker can gain access to sensitive information by exploiting this vulnerability. Remediation Upgrade Azure.Identity to version 1.11.0...
Azure Identity Library for .NET Information Disclosure Vulnerability
Azure Identity Library for .NET Information Disclosure Vulnerability...
CVE-2024-29992
Azure Identity Library for .NET Information Disclosure Vulnerability...
CVE-2024-29992
Azure Identity Library for .NET Information Disclosure Vulnerability...
CVE-2024-29992 Azure Identity Library for .NET Information Disclosure Vulnerability
...
CVE-2024-29992
CVE-2024-29992: Azure Identity Library for .NET Information Disclosure Vulnerability. IBM security bulletin confirms impact on IBM Robotic Process Automation server components; fixed by updating to IBM RPA server 21.0.7.16 or higher (and 23.x line to 23.0.16+ as applicable). IBM notes the vulnera...
PT-2024-2773 · Microsoft · Azure Identity Library For .Net
Name of the Vulnerable Software and Affected Versions: Azure Identity Library for .NET versions prior to the fixed version Description: The vulnerability in the Azure Identity Library for .NET is related to insufficient protection of registration data, which can allow an attacker to gain...
Security Bulletin: A vulnerability in Microsoft Azure Identity SDK may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution. (CVE-2023-36414).
Summary There is a vulnerability in Microsoft Azure Identity SDK used by IBM Robotic Process Automation as part of API configuration. An attacker could exploit this vulnerability to execute arbitrary code on the system, caused by an integer overflow. CVE-2020-36414. Vulnerability Details...
Security Update for Azure Identity Module (October 2023)
The version of Azure Identity installed on the remote host is prior to 3.3.1. It is, therefore, affected by a remote code execution vulnerability: As an authenticated user, the attacker could attempt to trigger malicious code in the context of the server's account through a network call. The...
Azure Identity Library Installed (Windows)
Binary data azureidentitywininstalled.nbin...
Azure Identity Library Installed (Linux/UNIX)
Binary data azureidentitynixinstalled.nbin...
GHSA-5MFX-4WCX-RV27 Azure Identity SDK Remote Code Execution Vulnerability
Azure Identity SDK is vulnerable to remote code execution...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE by passing a specially crafted OS-level command to a specific SDK property which is passed to the underlying CLI. By exploiting this vulnerability an attacker could gain high privileges, which include read,...
CVE-2023-36415
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability...
CVE-2023-36415
Azure Identity SDK Remote Code Execution Vulnerability...
