Multiple vulnerabilities in Microsoft Azure

説明

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

1. An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service Confidential Container can be exploited remotely to gain privileges.
2. An elevation of privilege vulnerability in Microsoft Entra Jira Single-Sign-On Plugin can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Microsoft Azure File Sync can be exploited remotely to gain privileges.
4. A remote code execution vulnerability in Azure DevOps Server can be exploited remotely to execute arbitrary code.
5. A spoofing vulnerability in Azure Stack Hub can be exploited remotely to spoof user interface.
6. An elevation of privilege vulnerability in Microsoft Azure Site Recovery can be exploited remotely to gain privileges.
7. An elevation of privilege vulnerability in Azure Connected Machine Agent can be exploited remotely to gain privileges.
8. A spoofing vulnerability in Microsoft Azure Active Directory B2C can be exploited remotely to spoof user interface.
9. A remote code execution vulnerability in Microsoft Azure Kubernetes Service Confidential Container can be exploited remotely to execute arbitrary code.

オリジナルアドバイザリー

• CVE-2024-21403

• CVE-2024-21401
• CVE-2024-21397
• CVE-2024-20667
• CVE-2024-20679
• CVE-2024-21364
• CVE-2024-21329
• CVE-2024-21381
• CVE-2024-21376

関連製品

• Microsoft-Active-Directory
• Microsoft-Azure

CVEリスト

• CVE-2024-21403
  critical
• CVE-2024-21401
  critical
• CVE-2024-21397
  high
• CVE-2024-20667
  critical
• CVE-2024-20679
  high
• CVE-2024-21364
  critical
• CVE-2024-21329
  high
• CVE-2024-21381
  high
• CVE-2024-21376
  critical

KBリスト

• 5023054
• 5034599
• 5023052

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com