13695 matches found
Impact of Azure AD Graph Deprecation on Veeam Plug-In for Microsoft Azure
Challenge Data protection of Azure services may fail using any version of Veeam Plug-In for Microsoft Azure below v6 build number 6.0.0.234. Cause Starting February 1, 2025, Microsoft has retired Azure AD Graph. As a result, any application relying on Azure AD Graph will be unable to make request...
CVE-2025-21415
Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...
CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability
...
CVE-2025-21415
CVE-2025-21415 affects Azure AI Face Service, where an authentication bypass by spoofing allows an authorized attacker to elevate privileges over a network. Public sources (NVD, MSRC) confirm a high-severity elevation-of-privilege flaw with CVSS v3.1 scores: NVD base 8.8 (C/H/I/A), Microsoft’s ve...
CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability
...
Azure AI Face Service Elevation of Privilege Vulnerability
Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network...
KLA79416 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure AI Face Service can be exploited remotely to gain privileges. 2. An...
PT-2025-4230 · Microsoft · Azure Ai Face Service
Name of the Vulnerable Software and Affected Versions: Azure AI Face Service affected versions not specified Description: An authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network. This issue has been exploited in real-world...
Microsoft Azure AI Face Service 安全漏洞
Microsoft Azure AI Face Service is an artificial intelligence face service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Azure AI Face Service that stems from bypassing authentication through spoofing allowing an authorized attacker to elevate privileges over the...
Security Bulletin: A vulnerability in Microsoft.BotBuilder affects IBM Robotic Process Automation which may result in elevated privileges (CVE-2024-35255).
Summary A vulnerability in Microsoft.BotBuilder affects IBM Robotic Process Automation which may result in elevated privileges. Microsoft.BotBuilder is used to enable communication between Azure Bot Services and the ChatBot API. This bulletin identifies the security fixes to apply to address the...
The vulnerability of the Azure Database for PostgreSQL Flexible Server’s database management system lies in the lack of measures taken at the control level to clean data. This allows attackers to execute arbitrary code and increase their privileges.
The vulnerability of the Azure Database for PostgreSQL Flexible Server database management system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and increase their...
python311-azure-storage-blob-12.24.1-1.1 on GA media (moderate)
python311-azure-storage-blob-12.24.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14690-1 Rating: moderate Cross-References: CVE-2022-30187 CVSS scores: CVE-2022-30187 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: openSUSE Tumbleweed An update that solves one...
CVE-2025-24034
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Starting in version 0.7.0 and prior to versions 0.7.15 and 0.8.3, Himmelblau is vulnerable to leaking credentials in debug logs. When debug logging is enabled, user access tokens are inadvertently logged, potentially...
CVE-2025-24034 Himmelblau leaks credentials in the debug log
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Starting in version 0.7.0 and prior to versions 0.7.15 and 0.8.3, Himmelblau is vulnerable to leaking credentials in debug logs. When debug logging is enabled, user access tokens are inadvertently logged, potentially...
CVE-2025-24034 Himmelblau leaks credentials in the debug log
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Starting in version 0.7.0 and prior to versions 0.7.15 and 0.8.3, Himmelblau is vulnerable to leaking credentials in debug logs. When debug logging is enabled, user access tokens are inadvertently logged, potentially...
CSRF vulnerability in Jenkins Azure Service Fabric Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method...
GHSA-WH3H-J8WP-6P42 CSRF vulnerability in Jenkins Azure Service Fabric Plugin
A cross-site request forgery CSRF vulnerability in Jenkins Azure Service Fabric Plugin 1.6 and earlier allows attackers to connect to a Service Fabric URL using attacker-specified credentials IDs obtained through another method...
GHSA-GP8P-49GR-JV8J Missing permission checks in Jenkins Azure Service Fabric Plugin
The Jenkins Azure Service Fabric Plugin 1.6 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. Those can be used as part of an attack to capture the...
Missing permission checks in Jenkins Azure Service Fabric Plugin
The Jenkins Azure Service Fabric Plugin 1.6 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of Azure credentials stored in Jenkins. Those can be used as part of an attack to capture the...