Vulnerabilities fixed in Microsoft Azure components

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges or execute code with administrator privileges. Azure Monitor: |----------------|------|-------------------------------------| | CVE ID | CVS...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2024-45231 via django (1.9.0rc2)

django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

CVE-2024-38097

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-38097

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-38097

CVE-2024-38097 affects Microsoft Azure Monitor Agent. The vulnerability is an elevation of privilege in the Monitor Agent component, enabling local attacker with Low privileges and no user interaction to gain HIGH integrity and Privilege escalation on affected systems (local vector). Root cause d...

CVE-2024-38097 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-38097 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-47565

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the...

CVE-2024-47563

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable...

CVE-2024-47562

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly neutralize special elements in user input to the ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands i...

CVE-2024-47563

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable...

CVE-2024-47565

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the...

CVE-2024-47562

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly neutralize special elements in user input to the ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands i...

CVE-2024-47553

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate user input to the ssmctl-client command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the...

CVE-2024-47553

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate user input to the ssmctl-client command. This could allow an authenticated, lowly privileged remote attacker to execute arbitrary code with root privileges on the...

CVE-2024-47565

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the...

CVE-2024-47565

CVE-2024-47565 – Siemens SINEC Security Monitor affects all versions prior to 4.9.0. The vulnerability arises from improper validation of user input against a list of allowed values in the ssmctl-client/interface, enabling an authenticated remote attacker to compromise the integrity of the applic...

CVE-2024-47565

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate that user input complies with a list of allowed values. This could allow an authenticated remote attacker to compromise the integrity of the configuration of the...

CVE-2024-47563

Siemens SINEC Security Monitor (all versions

CVE-2024-47563

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable...