51 matches found
Privilege escalation
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability...
CVE-2023-36419
Technical details about CVE-2023-36419 are not publicly provided in the connected documents. The initial description notes an XXE-based elevation of privilege in Azure HDInsight Oozie, but no further specifics (version, root cause, fix) are available here. Monitor for updates.
CVE-2023-36419 Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
...
CVE-2023-36419 Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
...
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
...
PT-2023-6076 · Microsoft · Azure Hdinsight Apache Oozie Workflow Scheduler
Name of the Vulnerable Software and Affected Versions: Azure HDInsight Apache Oozie Workflow Scheduler affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure HDInsight Apache Oozie Workflow Scheduler. It is associated with...
CVE-2023-36419: Improper Restriction of XML External Entity Reference
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability...
KLA61357 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Identity SDK can be exploited remotely to execute...
Microsoft Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure HDInsight Apache Ambari, which can be exploited by an attacker to gain domain administrator privileges...
Researchers Detail 8 Vulnerabilities in Azure HDInsight Analytics Service
More details have emerged about a set of now-patched cross-site scripting XSS flaws in the Microsoft Azure HDInsight open-source analytics service that could be weaponized by a threat actor to carry out malicious activities. "The identified vulnerabilities consisted of six stored XSS and two...
The vulnerability of the Azure HDInsight data analytics service, related to insufficient access control, allows attackers to escalate their privileges.
The vulnerability of the Azure HDInsight data analytics service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially crafted request...
CVE-2023-38156
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability...
Privilege escalation
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability...
CVE-2023-38156 Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
...
CVE-2023-38156
CVE-2023-38156 concerns Azure HDInsight Ambari. Connected sources describe a privilege-escalation via insufficient access controls in Azure HDInsight Ambari/JDBC pathways, enabling a remote attacker to gain elevated privileges. The issue is reported for Azure HDInsight and Ambari components, with...
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
...
PT-2023-5026 · Microsoft · Azure Hdinsight
Name of the Vulnerable Software and Affected Versions: Azure HDInsight affected versions not specified Description: The issue is related to insufficient access controls in Azure HDInsight, allowing a remote attacker to elevate their privileges using a specially crafted request. Recommendations: A...
CVE-2023-38156: Improper Input Validation
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability...
Microsoft Azure 安全漏洞
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure HDInsight Apache Ambari, which can be exploited by an attacker to gain domain administrator privileges...
