VDB
CVE-2024-21400
CVE-2024-21400
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft Azure ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen und Informationen falsch darzustellen.
EPSS 2.20% · 82.3th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
2.20%
82.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft Azure SDK | |
| Microsoft | Microsoft Azure Sentinel | |
| Microsoft | Microsoft Azure Automation | |
| Microsoft | Microsoft Azure Kubernetes Service Confidential Containers | |
| Microsoft | Microsoft Azure Data Studio | |
| Microsoft | Microsoft Azure Automation Update Management | |
| Microsoft | Microsoft Azure Security Center | |
| IBM | IBM QRadar SIEM 7.3.3-7.5.0 |
Timeline
- Mar 12, 2024 CVE Published
- Mar 13, 2024 EPSS Score
- Mar 13, 2024 PoC Published
- Mar 13, 2024 PoC Published
- Mar 13, 2024 PoC Published
- Mar 13, 2024 PoC Published
- Apr 9, 2024 EPSS Score
- Jun 1, 2024 EPSS Score
- Jun 28, 2024 EPSS Score
- Jul 24, 2024 EPSS Score
- Sep 16, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score