Microsoft Azure CycleCloud Privilege Escalation (CVE-2021-36943)

A privilege escalation vulnerability exists in Azure CycleCloud. An unauthenticated, local attacker can exploit this, to elevate their privilege on the system. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

CVE-2021-36949 Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

...

Microsoft Azure Sphere Security Monitor SMSyscallWriteBlockToStageImage information disclosure vulnerability

Talos Vulnerability Report TALOS-2021-1310 Microsoft Azure Sphere Security Monitor SMSyscallWriteBlockToStageImage information disclosure vulnerability August 10, 2021 CVE Number None SUMMARY An information disclosure vulnerability exists in the Security Monitor SMSyscallWriteBlockToStageImage...

KLA12258 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass Microsoft Azure can ...

Microsoft Azure 权限许可和访问控制问题漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation. A vulnerability exists in Microsoft Azure with privilege licensing and access control issues. The following products and versions are affected: Azure CycleCloud version 7.9.10...

Microsoft Azure Sphere 输入验证错误漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. An input validation error vulnerability exists in Microsoft Azure Sphere. The following products and versions are affected:Azure Sphere...

Microsoft Azure Sphere Security Monitor SECTION_ABIDepends denial of service vulnerability

Talos Vulnerability Report TALOS-2021-1311 Microsoft Azure Sphere Security Monitor SECTIONABIDepends denial of service vulnerability August 10, 2021 CVE Number None SUMMARY A denial of service vulnerability exists in the Security Monitor SECTIONABIDepends functionality of Microsoft Azure Sphere...

Microsoft Azure 权限许可和访问控制问题漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A vulnerability exists in Microsoft Azure with privilege license and access control issues. The following products and versions are affected:Azure CycleCloud 8.2.0...

Microsoft Azure Sphere 输入验证错误漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. An input validation error vulnerability exists in Microsoft Azure Sphere. The following products and versions are affected:Azure Sphere...

Microsoft Azure Sphere 权限许可和访问控制问题漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A vulnerability exists in Microsoft Azure Sphere with privilege permission and access control issues. The following products and versions are affected:Azure Sphere...

MISA expands portfolio and looks ahead during Microsoft Inspire

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. Welcome to fiscal year 2022 FY22 and my first official blog as the MISA Lead. It’s been a whirlwind couple of months getting up to speed with all things MISA—closing out FY21...

MISA expands portfolio and looks ahead during Microsoft Inspire

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. Welcome to fiscal year 2022 FY22 and my first official blog as the MISA Lead. It’s been a whirlwind couple of months getting up to speed with all things MISA—closing out FY21...

Microsoft Azure and Microsoft Azure Stack Input Validation Error Vulnerability

Microsoft Azure and Microsoft Azure Stack are both products of Microsoft Corporation, USA.Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms.Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform. . The product supports...

Improve your threat detection and response with Microsoft and Wortell

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. The way of working is changing rapidly. Many workloads are moving to the cloud and the pandemic accelerated organizations to provide infrastructure to aid employees working from...

W3 Total Cache < 2.1.3 - Authenticated Stored XSS

The plugin did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue Vulnerable parameters: &cdncnames= 1, cdncnames= 2, cdncnames= 3. CDN Type:...

Getting Hosts from Microsoft Intune MDM using Python

Today I want to talk about Microsoft Intune. It is a Mobile Device Management platform. Well, I think that the importance of MDM systems has become much higher than it was before the days of covid-19. Simply because a lot more people now work remotely using corporate laptops. And if these people...

odix and Microsoft: Protecting users against malware attacks with free FileWall license

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. The fight against malware has become the epic battle of our generation, placing businesses of all sizes against a never-ending stream of hackers and zero-day attacks bent on...

Release Information for Veeam Backup for Microsoft Azure v2a

Requirements You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the main menu in Veeam Backup for Microsoft Azure. After installing, your build number will be 2.0.0.337. What's New The new version...

WALinuxAgent bug fix and enhancement update

The Microsoft Azure Linux Agent supports the provisioning and running of Linux virtual machines in the Microsoft Azure cloud. WALinuxAgent has been rebased to upstream version 2.2.49 BZ1896907 Additional bug fixes and enhancements: Miss report "hostnamectl set-hostname --static failed, attempting...

WALinuxAgent bug fix and enhancement update

An update is available for WALinuxAgent. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Microsoft Azure Linux Agent supports the provisioning and running of...