Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from Microsoft USA. A security vulnerability exists in Microsoft Azure. An attacker can exploit the vulnerability to elevate privileges. No information about this vulnerability is available at this time, so stay tuned ...

Microsoft Azure Stack 输入验证错误漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft Corporation USA. The product supports building and deploying hybrid applications. An input validation error vulnerability exists in Microsoft Azure Stack. An attacker could exploit...

PT-2024-30588 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue concerns an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

KLA73221 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure CycleCloud can be exploited remotely to execute...

Microsoft Azure CycleCloud 代码注入漏洞

Microsoft Azure CycleCloud is a suite of enterprise-friendly tools from Microsoft Corporation USA for orchestrating and managing high-performance computing HPC environments on Azure. A code injection vulnerability exists in Microsoft Azure CycleCloud. An attacker exploiting this vulnerability cou...

Microsoft Azure Network Watcher VM Extension < 1.4.3422.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3422.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated...

PT-2024-27902 · Microsoft · Azure Stack Hub

Name of the Vulnerable Software and Affected Versions: Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Stack Hub. There is no information provided about the estimated number of potentially affected devices...

Partnering for Security: Qualys Solutions for Microsoft Azure Linux in AKS

As customers transition from traditional workloads to containerized environments, they face significant challenges. Containers introduce a level of complexity that traditional security measures often fail to address, primarily due to their ephemeral nature and the shared responsibility model...

MAL-2024-8850 Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2024-708)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-708 advisory. Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-35255 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to...

Simplifying Azure Cloud Security with Snapshot-Based Scans

As organizations increasingly move to the cloud, securing these dynamic and transient environments has become a critical challenge for security teams. Cloud deployments are inherently more fluid than traditional infrastructure, with resources constantly being spun up, modified, or decommissioned...

Important: amazon-cloudwatch-agent

Issue Overview: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-35255 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows...

Important: amazon-cloudwatch-agent

Issue Overview: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-35255 The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows...

Microsoft Azure Active Directory Login Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Azure Active Directory Login Enumeration', 'Description' = %q This module enumerates valid usernames and passwords against a Microsoft...

PVS Configuration Wizard fails when connecting to the database

The customer has PVS servers running in Azure. In the PVS Configuration Wizard, in the "Database Server" dialogue when specifying Authentication "Active Directory Password ", and proceeding with specifying a domain username and password results in an error...

OPENSUSE-SU-2024:0269-1 Security update for trivy

trivy was updated to fix the following issues: Update to version 0.54.1: fixflag: incorrect behavior for deprected flag --clear-cache backport: release/v0.54 7285 fixjava: Return error when trying to find a remote pom to avoid segfault backport: release/v0.54 7283 fixplugin: do not call GitHub...

The vulnerability of the automated deployment and scaling service for managed Apache Cassandra Azure Managed Instances lies in the lack of access control mechanisms, allowing attackers to escalate their privileges.

The vulnerability of the automated deployment and scaling service for managed Apache Cassandra instances in Azure is related to lack of access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

CVE-2024-44796

A cross-site scripting XSS vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the errordescription parameter...

The vulnerability of the integrated Azure Stack Hub hybrid cloud computing system, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the integrated hybrid cloud computing system Azure Stack Hub is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...