CVE-2024-35255

CVE Database · CVE-2024-35255

· MEDIUMModified

CVSS v3.1

5.5

EPSS

0.78%

Published

Jun 11, 2024

Modified

Nov 21, 2024

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-362CWE-362

Affected Products (9)

microsoft · authentication_library (up to 1.15.1)vulnerable

microsoft · authentication_libraryvulnerable

microsoft · authentication_library (up to 4.61.3)vulnerable

microsoft · azure_identity_sdk (up to 1.6.0)vulnerable

microsoft · azure_identity_sdk (up to 1.8.0)vulnerable

microsoft · azure_identity_sdk (up to 1.11.4)vulnerable

microsoft · azure_identity_sdk (up to 1.12.2)vulnerable

microsoft · azure_identity_sdk (up to 1.16.1)vulnerable

References (2)

PatchVendor Advisory

PatchVendor Advisory