Security Updates for Azure CycleCloud (September 2024)

The Azure CycleCloud product is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability exists due to a disclosure of the storage credentials. An authenticated, remote attacker can exploit this to bypass authentication and execu...

CVE-2024-43469

creationtimestamp| type| source ---|---|--- 2024-09-10 17:25:32+00:00| seen| https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review 2024-09-10 20:06:24+00:00| seen| https://t.me/cvedetector/5288...

CVE-2024-43469

Azure CycleCloud Remote Code Execution Vulnerability...

CVE-2024-43469 Azure CycleCloud Remote Code Execution Vulnerability

...

CVE-2024-43469

CVE-2024-43469 affects Microsoft Azure CycleCloud. The vulnerability enables remote code execution due to a disclosure of storage credentials, allowing an authenticated, remote attacker to bypass authentication and execute arbitrary commands with root privileges. CVSSv3.1 base score is 8.8 (HIGH)...

CVE-2024-43469 Azure CycleCloud Remote Code Execution Vulnerability

...

KLA73221 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure CycleCloud can be exploited remotely to execute...