CVE-2024-38188 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

CVE-2024-38188

CVE-2024-38188 affects Microsoft Azure Network Watcher VM Extension (Windows). Reports from Nessus plugins and advisories indicate an elevation of privilege vulnerability in the Azure Network Watcher VM Agent/Extension prior to specific updated versions (e.g., 1.4.3563.1 and 1.4.3422.1 in differe...

CVE-2024-38188 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

...

PT-2024-27897 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide...

KLA73221 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure CycleCloud can be exploited remotely to execute...

PT-2024-30588 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue concerns an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

Microsoft Azure Network Watcher VM Extension < 1.4.3422.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3422.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated...

BIT-ELASTICSEARCH-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

GHSA-2HJR-VMF3-XWVP Elasticsearch Insertion of Sensitive Information into Log File

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

Elasticsearch Insertion of Sensitive Information into Log File

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

UBUNTU-CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

CVE-2023-49921

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessi...

The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems stems from an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

Microsoft Azure Network Watcher VM Extension Installed (Windows)

Binary data microsoftazurenetworkwatcherwininstalled.nbin...

Microsoft Azure Network Watcher VM Extension < 1.4.3320.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3320.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the...