Multiple vulnerabilities in Microsoft Azure

Description

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure Site Recovery can be exploited remotely to obtain sensitive information.
2. An information disclosure vulnerability in Azure SDK for .NET can be exploited remotely to obtain sensitive information.
3. A remote code execution vulnerability in Azure Site Recovery can be exploited remotely to execute arbitrary code.

Original advisories

• CVE-2022-26896

• CVE-2022-26897
• CVE-2022-26907
• CVE-2022-26898

Related products

• Microsoft-Azure

CVE list

• CVE-2022-26896
  warning
• CVE-2022-26897
  warning
• CVE-2022-26907
  high
• CVE-2022-26898
  high

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com