Security Updates for Microsoft Azure Site Recovery (March 2022)

The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2022-24519

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-24519

CVE-2022-24519 affects Microsoft Azure Site Recovery (VMware-to-Azure scenario) and is an Elevation of Privilege vulnerability. Public-details in connected sources confirm the vulnerability and that Microsoft released updates to fix it (MS22-5011122; see NCSC advisory). Remediation guidance: appl...