Security Updates for Microsoft Azure Site Recovery (March 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-24515

creationtimestamp| type| source ---|---|--- 2022-03-09 20:18:20+00:00| seen| https://t.me/cibsecurity/38613...

CVE-2022-24515

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24515

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24515

CVE-2022-24515 concerns an Elevation of Privilege in Microsoft Azure Site Recovery (VMware‑to‑Azure recovery). Connected sources confirm the vulnerability affects Azure Site Recovery and lists privilege escalation as the impact; Microsoft/NCSC references indicate fixes via updates, but the docume...