CVE-2023-21777

Technical details about CVE-2023-21777 are not provided in the supplied connected documents. The CVE is described as an elevation of privilege issue in Azure App Service on Azure Stack Hub; no patch/version specifics are included here. Monitor vendor advisories for fixes.

2023-02 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5022921)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

Azure DevOps Server Cross-Site Scripting Vulnerability

...

February 14, 2023—KB5022893 (Security-only update)

None None...

Azure Data Box Gateway Remote Code Execution Vulnerability

...

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

February 14, 2023—KB5022890 (Monthly Rollup)

None None...

February 14, 2023—KB5022872 (Monthly Rollup)

None None...

Azure DevOps Server Remote Code Execution Vulnerability

...

Azure Machine Learning Compute Instance Information Disclosure Vulnerability

...

February 14, 2023—KB5022874 (Security-only update)

None None...

PT-2023-1421 · Microsoft · Azure App Service

Name of the Vulnerable Software and Affected Versions: Azure App Service on Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure App Service on Azure Stack Hub. It is associated with access control errors. Exploitati...

Microsoft Azure App Service 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure App Service. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor...

Microsoft Azure DevOps Server 安全漏洞

Microsoft Azure DevOps Server is a suite of software development collaboration tools from Microsoft Corporation USA. The product includes features such as code sharing, work tracking, and software distribution. A security vulnerability exists in Microsoft Azure DevOps Server. No information about...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several components of Azure. For an overview of the vulnerabilities, see the following list. Azure App Service: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed vulnerabilities in several Developer tools. A malicious party could exploit the vulnerabilities to cause a denial-of-service, to grant himself elevated privileges granted, or to execute arbitrary code with privileges of the victim. To do this, the malicious party must entice t...

PT-2023-6855 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: The issue is related to a lack of protection for service data in Azure Machine Learning, which can allow a remote attacker to gain unauthorized access to protected informatio...

February 14, 2023-KB5022726 Cumulative Update for .NET Framework 3.5 and 4.8 for Azure Stack HCI, version 22H2

None None...

Microsoft SQL Server 安全漏洞

Microsoft SQL Server is a large commercial database system from Microsoft that is used on Microsoft Windows systems. A security vulnerability exists in SQL Server. The following products and versions are affected:Microsoft SQL Server 2017 for x64-based Systems GDR,Microsoft SQL Server 2014 Servic...

PT-2023-1397 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to incorrect code generation management in Azure DevOps Server, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At t...