CVE-2024-38175 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-38175 PUBLISHED CVSS 9.600000381469727 CRITICAL

An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.

EPSS 6.12% · 90.7th percentile

Risk Scores

CVSS v3.1

9.600000381469727

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:F/RL:O/RC:C

EPSS Score

6.12%

90.7th percentile

Affected Products

Vendor	Product	Versions
Microsoft	N/A
Microsoft	Azure Managed Instance for Apache Cassandra	N/A
microsoft	azure_managed_instance_for_apache_cassandra	N/A

Timeline

Aug 13, 2024 CVE Published
Aug 21, 2024 EPSS Score
Sep 10, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Oct 17, 2024 Coalition ESS Score
Oct 20, 2024 EPSS Score
Nov 8, 2024 Coalition ESS Score
Nov 9, 2024 EPSS Score
Nov 29, 2024 EPSS Score
Jan 9, 2025 EPSS Score
Jan 29, 2025 EPSS Score
Jan 29, 2025 CVE Updated

References

Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-38175 advisory

Open in Interactive Console →