CVE-2024-35255

A flaw was found in Microsoft's Azure Identity Libraries and the Microsoft Authentication Library MSAL. The flaw arises from a race condition—a scenario where the timing of events leads to unexpected behavior—during concurrent operations on shared resources. This can result in privilege escalatio...

The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components of the Azure Identity Libraries and Microsoft Authentication Library allows a perpetrator to escalate their privileges.

The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components in the Azure Identity Libraries and Microsoft Authentication Library authentication libraries is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow attacke...

GHSA-RVJ4-Q8Q5-8GRF ACME DNS: Azure Identity Libraries Elevation of Privilege Vulnerability

Impact There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability. References - CVE-2024-35255 Patches - https://github.com/traefik/traefik/releases/tag/v2.11.5 - https://github.com/traefik/traefik/releases/tag/v3.0.3 Workarounds...

GHSA-M5VV-6R4H-3VJ9 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42646 CVE-2024-35255 affecting package prometheus for versions less than 2.45.4-12

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42664 CVE-2024-35255 affecting package telegraf for versions less than 1.29.4-6

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42637 CVE-2024-35255 affecting package keda for versions less than 2.14.1-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42799 CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42649 CVE-2024-35255 affecting package telegraf for versions less than 1.31.0-9

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-42789 CVE-2024-35255 affecting package azcopy for versions less than 10.25.1-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

AZL-43323 CVE-2024-35255 affecting package blobfuse2 for versions less than 2.3.2-1

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...

CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

...

CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

...

CVE-2024-35255

CVE-2024-35255 is an elevation-of-privilege vulnerability described as a race-condition issue in Azure Identity Libraries and Microsoft Authentication Library. IBM’s security bulletin for IBM Cloud Pak for AIOps lists CVE-2024-35255 with a base score of 5.5 (CVSS 3.0) and CWE-362, affecting IBM R...

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

...

traefik -- Azure Identity Libraries Elevation of Privilege Vulnerability

The traefik authors report: There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...