K32544615: BIG-IP iControl REST API vulnerability CVE-2024-22389

Security Advisory Description When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. CVE-2024-22389 Impact This vulnerability may allow a high privileged remote authenticated attacker to use deleted or updated API...

PT-2024-19382 · F5 · Big-Ip

The affected software is BIG-IP, specifically when deployed in high availability HA mode. The issue arises when an iControl REST API token is updated, and this change is not synchronized with the peer device. An exploit for this issue is available. The BIG-IP software is affected when deployed in...

CVE-2024-21397

Microsoft Azure File Sync Elevation of Privilege Vulnerability...

CVE-2024-21397

Microsoft Azure File Sync Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Azure File Sync Elevation of Privilege Vulnerability...

CVE-2024-21397

CVE-2024-21397 — Microsoft Azure File Sync Elevation of Privilege is an Azure File Sync Agent vulnerability where an issue could allow unauthorized users to create files in locations they are not allowed to access. The primary public details describe the impact as an elevation of privileges with ...

CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

Microsoft Azure File Sync Elevation of Privilege Vulnerability

...

Azure File Sync Agent v16.2 Release - February 2024 (Security-only update)

None None...

Azure File Sync Agent v17.1 Release - February 2024 (Security-only update)

None None...

Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)

Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)

Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)

Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)

Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)

Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)

Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v16.2 Release – February 2024 (KB5023052)

Security update for Azure File Sync agent version 16.2.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v17.1 Release – February 2024 (KB5023054)

Security update for Azure File Sync agent version 17.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

PT-2024-1885 · Microsoft · Azure File Sync

Name of the Vulnerable Software and Affected Versions: Microsoft Azure File Sync affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft Azure File Sync service, which can be exploited to bypass existing security limitations and eleva...