January 9, 2024—KB5034173 (Monthly Rollup)

None None...

October 10, 2023—KB5031416 (Monthly Rollup)

None None...

September 12, 2023—KB5030271 (Monthly Rollup)

None None...

September 12, 2023—KB5030216 (OS Build 20348.1970)

None None...

CVE-2023-21777

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability...

CVE-2023-21777

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability...

Privilege escalation

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability...

CVE-2023-21777 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2023-21777

Technical details about CVE-2023-21777 are not provided in the supplied connected documents. The CVE is described as an elevation of privilege issue in Azure App Service on Azure Stack Hub; no patch/version specifics are included here. Monitor vendor advisories for fixes.

CVE-2023-21777 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

...

PT-2023-1421 · Microsoft · Azure App Service

Name of the Vulnerable Software and Affected Versions: Azure App Service on Azure Stack Hub affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure App Service on Azure Stack Hub. It is associated with access control errors. Exploitati...

Microsoft Azure 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure. The following products and versions are affected: Azure Automation State Configuration, DSC Extension, Azure...

The vulnerability of the JEA (Just Enough Administration) security technology implementation in the hybrid cloud platform of Dell EMC Integrated System for Microsoft Azure Stack Hub allows a malicious individual to increase their privileges.

The vulnerability of the JEA Just Enough Administration security technology implemented on the Dell EMC Integrated System for Microsoft Azure Stack Hub hybrid cloud platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to increase their...

Dell EMC Integrated System Elevation of Privilege Vulnerability

DELL EMC Integrated System is a native hybrid cloud platform for infrastructure and platform-as-a-service from Dell USA. An elevation of privilege vulnerability exists in Dell EMC Integrated System for Microsoft Azure Stack Hub. The vulnerability stems from an incorrect programmatic call to an...

CVE-2021-36302

All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system...

CVE-2021-36302

All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system...

CVE-2021-36302

Dell EMC Integrated System for Microsoft Azure Stack Hub is affected by a privilege-escalation vulnerability exploitable by a remote attacker with standard JEA credentials. Root cause: incorrect programmatic call to an advanced native procedure leading to elevation of privileges and system takeov...

Dell EMC Integrated System 安全漏洞

DELL EMC Integrated System is a native hybrid cloud platform for infrastructure and platform-as-a-service from Dell USA. An elevation of privilege vulnerability exists in Dell EMC Integrated System for Microsoft Azure Stack Hub. The vulnerability stems from an incorrect programmatic call to an...

Security Bulletin: IBM Application Navigator, which is bundled with IBM Cloud Pak for Applications, is vulnerable to a remote attacker exploitation of Apache Log4j (CVE-2021-44228)

Summary IBM Application Navigator, which is bundled with IBM Cloud Pak for Applications, is vulnerable to a remote attacker exploitation of Apache Log4j CVE-2021-44228. The IBM Application Navigator contains a copy of Apache Log4j which is not used by the IBM Application Navigator function. Out o...