KLA12074
PE vulnerabilities in Microsoft Azure

Обновлено: 16/02/2021
Дата обнаружения
09/02/2021
Уровень угрозы
High
Описание

An elevation of privilege vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges.

Below is a complete list of vulnerabilities:

  1. An elevation of privilege vulnerability in Azure IoT CLI extension can be exploited remotely to gain privileges.
  2. An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service can be exploited remotely to gain privileges.
Пораженные продукты

Microsoft Azure Kubernetes Service
azure-iot-cli-extension

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2021-24087
CVE-2021-24109
Оказываемое влияние
?
PE 
[?]
Связанные продукты
Microsoft Azure
CVE-IDS
CVE-2021-240870.0Unknown
CVE-2021-241090.0Unknown