VDB
CNVD-2024-44523
CNVD-2024-44523
PUBLISHED
CVSS 7.099999904632568 HIGH
Microsoft Azure Monitor Agent是一个轻量级代理程序,可安装在Azure或本地环境中的服务器或虚拟机上。 Microsoft Azure Monitor Agent存在权限提升漏洞,该漏洞是由Monitor Agent组件中的错误引起的。攻击者可利用此漏洞在系统上获得更高的权限。
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | azure_monitor_agent | 1.0.0 |
| Microsoft | Azure Monitor | 1.0.0 |
Timeline
- Oct 8, 2024 CVE Published
- Oct 8, 2024 PoC Published
- Jul 15, 2026 Security Advisory
References
- Azure Monitor Agent Elevation of Privilege Vulnerability vendor-advisory