Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in Azure products. A malicious person with prior authentication could exploit the vulnerabilities to gain access to sensitive data in the victim's context. Successful misuse requires the victim to log in, where the malicious person manages to win a race...

CVE-2024-13172

Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...

CVE-2024-13169

An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges...

CVE-2024-13169

An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges...

CVE-2024-13165

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...

CVE-2024-13164

An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2025-21178

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:16:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuciny652n 2025-01-14 18:25:59+00:00| seen|...

CVE-2025-21214

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:17:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpudbqjra2t 2025-01-14 18:56:03+00:00| seen|...

CVE-2025-21263

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpugl3e2z2c 2025-01-14 21:26:16+00:00| seen|...

CVE-2025-21309

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:21:13+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuk64azy2t 2025-01-14 18:49:03+00:00| seen|...

CVE-2025-21338

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuman5jb2f 2025-01-15 01:41:36+00:00| seen|...

CVE-2025-21348

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:22:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpumuaoeb2h 2025-01-15 02:11:36+00:00| seen|...

CVE-2025-21413

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:23:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuor2sjq2b 2025-01-14 18:49:09+00:00| seen|...

CVE-2025-21273

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuhb5l2r2f 2025-01-14 18:48:43+00:00| seen|...

CVE-2025-21405

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:23:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuojytjg2e 2025-01-14 19:51:39+00:00| seen|...

CVE-2025-21287

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuic6rqz2c 2025-01-14 22:41:21+00:00| seen|...

CVE-2025-21282

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuhwxz6y2t 2025-01-14 18:48:47+00:00| seen|...

CVE-2025-21374

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:23:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpunv37ft2p 2025-01-14 19:51:45+00:00| seen|...