CVE-2024-20685

Azure Private 5G Core Denial of Service Vulnerability...

CVE-2024-20685

Azure Private 5G Core Denial of Service Vulnerability...

CVE-2024-29993 Azure CycleCloud Elevation of Privilege Vulnerability

...

CVE-2024-29993

CVE-2024-29993 affects Azure CycleCloud and is an Elevation of Privilege vulnerability. Microsoft/MSRC lists this vulnerability under Azure CycleCloud with a CVSSv3 base score of 8.8 (Network, Privileges Required: Low, User Interaction: None; impacts Confidentiality, Integrity, Availability). The...

CVE-2024-29992 Azure Identity Library for .NET Information Disclosure Vulnerability

...

CVE-2024-29993 Azure CycleCloud Elevation of Privilege Vulnerability

...

CVE-2024-29992 Azure Identity Library for .NET Information Disclosure Vulnerability

...

CVE-2024-29992

CVE-2024-29992: Azure Identity Library for .NET Information Disclosure Vulnerability. IBM security bulletin confirms impact on IBM Robotic Process Automation server components; fixed by updating to IBM RPA server 21.0.7.16 or higher (and 23.x line to 23.0.16+ as applicable). IBM notes the vulnera...

CVE-2024-29989 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-29989

CVE-2024-29989 is an Azure Monitor Agent elevation-of-privilege vulnerability. Connected sources confirm affected product (Azure Monitor Agent), vulnerability class (elevation of privilege), and CVSSv3.1 base score 8.4 with LOCAL/LOW-complexity access, LOW privileges required, user interaction No...

CVE-2024-29989 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-28917 Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

...

CVE-2024-28917

Summary: CVE-2024-28917 is a cluster-scope elevation of privilege in Azure Arc-enabled Kubernetes Extension. According to connected sources, the affected component is the Azure Arc Kubernetes Extension (Cluster) and the impact is privilege escalation (obtain increased privileges). The CVSS score ...

CVE-2024-28917 Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability

...

CVE-2024-26193 Azure Migrate Remote Code Execution Vulnerability

...

CVE-2024-26193 Azure Migrate Remote Code Execution Vulnerability

...

CVE-2024-29990 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

CVE-2024-29990 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

CVE-2024-29990

Azure Kubernetes Service Confidential Container Elevation of Privilege vulnerability (CVE-2024-29990) is discussed in PT-2024-3523 as caused by a lack of access control in the deployment/management of confidential containers. The documented impact is privilege escalation via a remote attacker. No...

CVE-2024-20685

CVE-2024-20685 affects Microsoft Azure Private 5G Core and is described as a Denial of Service vulnerability. The available connected material states that a crafted signaling message can crash the control plane, potentially causing service outages. Public CVSS data from the Initial document lists...