CVE-2019-0962

An elevation of privilege vulnerability exists in Azure Automation "RunAs account" runbooks for users with contributor role, aka 'Azure Automation Elevation of Privilege Vulnerability'...

CVE-2019-0962

CVE-2019-0962 affects Azure Automation: an elevation-of-privilege vulnerability in the RunAs account runbooks that can let members with the contributor role access Key Vault secrets via a RunAs account. The root cause is misconfigured RunAs role assignments that inadvertently expose Key Vault acc...

KLA11821 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Automation can be exploited remotely to gain privileges. 2. An elevation o...