VDB

CVE-2024-38092

CVE-2024-38092 PUBLISHED

Es besteht eine Schwachstelle in Microsoft Azure CycleCloud. Ein entfernter, authentisierter Angreifer mit der Rolle "Benutzer" kann diese Schwachstelle ausnutzen, um die Administratorrolle in der anfälligen Azure CycleCloud-Instanz zu erlangen.

EPSS 9.81% · 93.1th percentile

Risk Scores

EPSS Score
9.81%
93.1th percentile

Affected Products

VendorProductVersions
MicrosoftMicrosoft Azure CycleCloud 8.4.1
MicrosoftMicrosoft Azure CycleCloud 8.5.0
MicrosoftMicrosoft Azure CycleCloud 8.1.1
MicrosoftMicrosoft Azure CycleCloud 7.9.1
MicrosoftMicrosoft Azure CycleCloud 8.4.2
MicrosoftMicrosoft Azure CycleCloud 7.9.10
MicrosoftMicrosoft Azure CycleCloud 8.0.0
MicrosoftMicrosoft Azure CycleCloud 7.9.2
MicrosoftMicrosoft Azure CycleCloud 8.0.1
MicrosoftMicrosoft Azure CycleCloud 8.2.2
MicrosoftMicrosoft Azure CycleCloud 7.9.8
MicrosoftMicrosoft Azure CycleCloud 7.9.7
MicrosoftMicrosoft Azure CycleCloud 8.3.0
MicrosoftMicrosoft Azure CycleCloud 7.9.9
MicrosoftMicrosoft Azure CycleCloud 8.1.0
MicrosoftMicrosoft Azure CycleCloud 7.9.11
MicrosoftMicrosoft Azure CycleCloud 7.9.5
MicrosoftMicrosoft Azure CycleCloud 8.6.0
MicrosoftMicrosoft Azure CycleCloud 7.9.0
MicrosoftMicrosoft Azure DevOps Server 2022.1

…and 9 more

Timeline

  • Jul 9, 2024 CVE Published
  • Jul 10, 2024 EPSS Score
  • Aug 1, 2024 EPSS Score
  • Sep 14, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 6, 2024 EPSS Score
  • Nov 19, 2024 EPSS Score
  • Dec 12, 2024 EPSS Score
  • Jan 25, 2025 EPSS Score
  • Feb 16, 2025 EPSS Score
  • Mar 17, 2025 EPSS Score
  • Mar 25, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›