Vulnerabilities fixed in Microsoft Azure

Vulnerabilities have been fixed in Microsoft Azure. The vulnerabilities allow a malicious party to obtain elevated privileges obtain or to impersonate another user. The vulnerability with attribute CVE-2022-37968 has a CVSS of 10.0. If an unauthenticated malicious person uses the randomly generat...

CVE-2022-38017

CVE-2022-38017 affects Microsoft Azure StorSimple 8000 Series. Vulnerability type: elevation of privilege in StorSimple 8000 Series components; root cause not detailed in the Initial document, but the CVSS 3.1 provides physical access as attack vector with no user interaction, and high confidenti...

CVE-2022-38017 StorSimple 8000 Series Elevation of Privilege Vulnerability

...