13727 matches found
CVE-2023-36052
CVE-2023-36052 relates to an information-disclosure vulnerability in Azure CLI REST Command within Microsoft Azure. Affected component: Azure CLI REST endpoints; underlying issue is information exposure leading to sensitive data disclosure. CVSS 3.1 score 8.6 (HIGH) with network attack vector and...
grafana: account takeover possible when using Azure AD OAuth
A flaw was found in Grafana, which validates Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique across Azure AD tenants, which enables Grafana account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant AzureAD OAuth...
Moderate: Red Hat Security Advisory: grafana security and enhancement update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
November 14, 2023—KB5032250 (Security-only update)
None None...
November 14, 2023—KB5032254 (Monthly Rollup)
None None...
Azure CLI REST Command Information Disclosure Vulnerability
...
Azure DevOps Server Remote Code Execution Vulnerability
...
November 14, 2023—KB5032252 (Monthly Rollup)
None None...
November 14, 2023—KB5032249 (Monthly Rollup)
None None...
November 14, 2023—KB5032248 (Security-only update)
None None...
Microsoft guidance regarding credentials leaked to GitHub Actions Logs through Azure CLI
Summary The Microsoft Security Response Center MSRC was made aware of a vulnerability where Azure Command-Line Interface CLI could expose sensitive information, including credentials, through GitHub Actions logs. The researcher, from Palo Alto Networks Prisma Cloud, found that Azure CLI commands...
Microsoft Azure Security Vulnerabilities
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. There is a security vulnerability in Microsoft Azure. An attacker exploiting the vulnerability could bypass certain features...
Microsoft Azure Security Vulnerabilities
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and...
KLA61977 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in Microsoft...
RHEL 8 : grafana (RHSA-2023:6972)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:6972 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: account takeov...
KB5032198: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (November 2023)
The remote Windows host is missing security update 5032198. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-36402 - Windows Pragmatic General Multicast PGM Remote Code Execution Vulnerability...
Moderate: grafana security and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: account takeover possible when using Azure AD OAuth CVE-2023-3128 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
Microsoft Azure DevOps Server Security Vulnerability
Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. An attacker exploiti...
PT-2023-6965 · Microsoft · Azure Cli
Name of the Vulnerable Software and Affected Versions: Azure CLI versions prior to the fixed version Description: The issue is related to a lack of protection for service data in the Azure CLI interface, which can be exploited by a remote attacker to gain access to credentials. The estimated numb...
ALSA-2023:6972 Moderate: grafana security and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: account takeover possible when using Azure AD OAuth CVE-2023-3128 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...