89 matches found
CVE-2024-43602 Azure CycleCloud Remote Code Execution Vulnerability
...
Microsoft Azure CycleCloud 授权问题漏洞
Microsoft Azure CycleCloud is a suite of enterprise-friendly tools from Microsoft Corporation USA for orchestrating and managing high-performance computing HPC environments on Azure. A security vulnerability exists in Microsoft Azure CycleCloud. An attacker exploiting this vulnerability could...
KLA77104 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Database for PostgreSQL Flexible Server Extension...
Security Updates for Azure CycleCloud (September 2024)
The Azure CycleCloud product is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists due to a disclosure of the storage credentials. An authenticated, remote attacker can exploit this to bypass authentication and execu...
CVE-2024-43469
Azure CycleCloud Remote Code Execution Vulnerability...
CVE-2024-43469
CVE-2024-43469 affects Microsoft Azure CycleCloud. The vulnerability enables remote code execution due to a disclosure of storage credentials, allowing an authenticated, remote attacker to bypass authentication and execute arbitrary commands with root privileges. CVSSv3.1 base score is 8.8 (HIGH)...
KLA73221 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure CycleCloud can be exploited remotely to execute...
Microsoft Azure CycleCloud 代码注入漏洞
Microsoft Azure CycleCloud is a suite of enterprise-friendly tools from Microsoft Corporation USA for orchestrating and managing high-performance computing HPC environments on Azure. A code injection vulnerability exists in Microsoft Azure CycleCloud. An attacker exploiting this vulnerability cou...
The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows a perpetrator to escalate their privileges.
The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to lack of access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Vulnerabilities fixed in Microsoft Azure components
Microsoft has fixed vulnerabilities in several Azure components. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges or impersonate another user. For successful abuse, the malicious party needs prior access to the vulnerable environment, or the malicious part...
CVE-2024-38195
Azure CycleCloud Remote Code Execution Vulnerability...
CVE-2024-38195 Azure CycleCloud Remote Code Execution Vulnerability
...
Microsoft Azure CycleCloud 访问控制错误漏洞
Microsoft Azure CycleCloud is a suite of enterprise-friendly tools from Microsoft Corporation USA for orchestrating and managing high-performance computing HPC environments on Azure. An access control error vulnerability exists in Microsoft Azure CycleCloud. An attacker exploiting this...
Security Updates for Azure CycleCloud (August 2024)
The Azure CycleCloud product is missing security updates. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists due to a disclosure of the storage credentials. An authenticated, remote attacker can exploit this to bypass authentication and...
The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to a flaw in the data protection mechanism, allows attackers to enhance their privileges.
The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...
CVE-2024-38092
Azure CycleCloud Elevation of Privilege Vulnerability...
CVE-2024-38092
Azure CycleCloud Elevation of Privilege Vulnerability...
CVE-2024-38092
CVE-2024-38092 is an Elevation of Privilege vulnerability in Microsoft Azure CycleCloud. The Azure CycleCloud product is affected; CVE details indicate a privilege escalation path, with a CVSSv3 base score of 8.8 (High) and exploitability characteristics (network access, low attack complexity, lo...
PT-2024-4987 · Microsoft · Azure Cyclecloud
Name of the Vulnerable Software and Affected Versions: Azure CycleCloud affected versions not specified Description: The issue is related to a data protection mechanism flaw in Azure CycleCloud, a tool for organizing and managing high-performance computing HPC environments. This flaw can be...
Security Updates for Azure CycleCloud (July 2024)
The Azure CycleCloud product is missing security updates. It is, therefore, affected by an elevation of privilege vulnerability. The attacker who successfully exploited this vulnerability could elevate privileges to the SuperUser role in the affected Azure CycleCloud instance. To exploit this...