CVE-2022-41085 Azure CycleCloud Elevation of Privilege Vulnerability

...

CVE-2022-41085

CVE-2022-41085 corresponds to an Elevation of Privilege vulnerability in Microsoft Azure CycleCloud. Connected documents indicate affected versions Azure CycleCloud 7 and 8, with root cause described as insufficient access controls in some sources. Remediation guidance across sources points to ap...

Vulnerabilities fixed in Microsoft Azure

Vulnerabilities have been fixed in Microsoft Azure. The vulnerabilities allow a malicious party to obtain elevated privileges obtain or to execute arbitrary code under the privileges of the user. The vulnerabilities marked CVE-2022-3602 and CVE-2022-3786 are located in OpenSSL and were previously...