Microsoft Azure CycleCloud Privilege Escalation (CVE-2021-36943)

A privilege escalation vulnerability exists in Azure CycleCloud. An unauthenticated, local attacker can exploit this, to elevate their privilege on the system. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

CVE-2021-36943

CVE-2021-36943 is an Azure CycleCloud elevation of privilege issue. Connected sources confirm a local escalation vulnerability in Azure CycleCloud, with root cause described as insufficient access control allowing a local attacker to elevate privileges. Public disclosures note the vulnerability a...