Security Updates for Microsoft Azure Site Recovery (March 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-24469

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24469 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-24469

CVE-2022-24469 is an Elevation of Privilege vulnerability in Microsoft Azure Site Recovery (VMware-to-Azure recovery). The ENISA/NCSC-affiliated sources confirm the affected component is Azure Site Recovery, with the impact described as obtaining elevated privileges. Notably, CVE-2022-24469 is de...