Security Updates for Microsoft Azure Site Recovery (March 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-24518

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24518

CVE-2022-24518 is an Elevation of Privilege issue affecting Microsoft Azure Site Recovery (specifically the VMware-to-Azure recovery scenario). Public documents summarize it as an elevated-privilege vulnerability within Azure Site Recovery components, with remediation delivered through Microsoft ...