13685 matches found
CVE-2025-3879 Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login
Vault Community, Vault Enterprise “Vault” Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the boundlocations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18...
Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login
Summary Vault Community, Vault Enterprise “Vault” Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the boundlocations parameter on login. This vulnerability, identified as CVE-2025-3879, is fixed in Vault Community Edition...
Citrix Daas - Azure - VM Booting Issue (after using Azure Image Gallery)
Could not see VM created in the Citrix DaaS & Azure Azure Image Gallery as it keep going in power off state immediately when attempting to boot - Unable to see VM OsDisk in the Azure Portal - Only Identity Disk & NIC card is getting created in the Azure Portal...
PT-2025-18909 · Hashicorp +1 · Vault Community Edition +2
Name of the Vulnerable Software and Affected Versions: Vault Community Edition versions prior to 1.19.1 Vault Enterprise versions prior to 1.19.1, 1.18.7, 1.17.14, 1.16.18 Description: The Azure Auth method in Vault did not correctly validate the claims in the Azure-issued token. This resulted in...
HashiCorp Vault Enterprise和HashiCorp Vault Community 安全漏洞
HashiCorp Vault Enterprise and HashiCorp Vault Community are both products of HashiCorp, Inc. of the U.S. HashiCorp Vault Enterprise is an enterprise information archiving platform.HashiCorp Vault Community is a key management engine. HashiCorp Vault Community is a key management engine used to...
Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach
Enterprise data backup platform Commvault has revealed that an unknown nation-state threat actor breached its Microsoft Azure environment by exploiting CVE-2025-3928 but emphasized there is no evidence of unauthorized data access. "This activity has affected a small number of customers we have in...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
CVE-2025-33074
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network...
CVE-2025-30392
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-30389
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-30389
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-30390
Improper authorization in Azure allows an authorized attacker to elevate privileges over a network...
CVE-2025-30390
Improper authorization in Azure allows an authorized attacker to elevate privileges over a network...
CVE-2025-30392
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-21416
Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network...
CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability
...
CVE-2025-21416
CVE-2025-21416 describes a privilege elevation vulnerability in Microsoft Azure Virtual Desktop caused by missing authorization. The issue enables an authorized attacker, over a network, to elevate privileges within affected environments. Documents consistently reference Azure Virtual Desktop, wi...
CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability
...