UBUNTU-CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-38176

CVE-2023-38176 is an elevation-of-privilege vulnerability in Azure Arc-Enabled Servers. Multiple sources (NVD, CNVD, MSRC advisories, and NCSc) confirm it allows an attacker to gain elevated privileges within the affected Arc environment (Azure Arc-Enabled Servers). The issue is categorized as an...

CVE-2023-38176 Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

...

CVE-2023-36881 Azure Apache Ambari Spoofing Vulnerability

...

CVE-2023-36881 Azure Apache Ambari Spoofing Vulnerability

...

CVE-2023-36881

CVE-2023-36881 corresponds to a spoofing vulnerability in Azure Apache Ambari. Public sources in the connected data identify Azure HDInsights/Azure Arc context and map the impact to spoofing, with an ability to impersonate or pre-emptively act as another user. The MSRC advisory indicates updates ...

CVE-2023-36877 Azure Apache Oozie Spoofing Vulnerability

...

CVE-2023-36877

Technical details about CVE-2023-36877 (Azure Apache Oozie Spoofing Vulnerability) are not available in the provided documents. No affected versions, root cause, or mitigation are specified here. Monitor for updates from official advisories.

CVE-2023-36877 Azure Apache Oozie Spoofing Vulnerability

...

CVE-2023-38188 Azure Apache Hadoop Spoofing Vulnerability

...

CVE-2023-38188 Azure Apache Hadoop Spoofing Vulnerability

...

CVE-2023-38188

CVE-2023-38188 is a spoofing vulnerability affecting Azure Apache Hadoop components in Azure HDInsight. Public sources (NCSC) indicate pre-authentication access to impersonate another user, enabling user-interface spoofing and potential privilege-lifting within affected Azure HDInsight/Azure Hado...

CVE-2023-35393 Azure Apache Hive Spoofing Vulnerability

...

CVE-2023-35393 Azure Apache Hive Spoofing Vulnerability

...

CVE-2023-35394 Azure HDInsight Jupyter Notebook Spoofing Vulnerability

...

CVE-2023-35394

CVE-2023-35394 affects Azure HDInsight Jupyter Notebook. The connected sources describe a spoofing vulnerability in Azure HDInsight Jupyter Notebook that could allow an attacker to pretend to be another user and potentially access or impersonate UI/session elements. The exact technical details (a...

CVE-2023-35393

CVE-2023-35393 corresponds to a spoofing vulnerability in Azure Apache Hive affecting Azure HDInsight/Hive components. The NCSC advisory summarizes the impact as "Pretend to be another user" and recommends installing the updates from Microsoft MSRC/MS-Update guidance. The available sources label ...

CVE-2023-36869 Azure DevOps Server Spoofing Vulnerability

...

CVE-2023-36869 Azure DevOps Server Spoofing Vulnerability

...

CVE-2023-36869

CVE-2023-36869 corresponds to a spoofing vulnerability in Microsoft Azure DevOps Server. Connected sources specify that the flaw allows an attacker to pretend to be another user, i.e., UI spoofing, with CVSS v3.1 base metrics: AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L (base 6.3). The vulnerability is c...