GCVE-110-CLOUD-2016-0001

Advisory Published

Vulnetix · Advisory published November 26, 2016

Full administrative access to the Azure Red Hat Enterprise Linux Appliance REST API was publicly exposed. It allowed malicious actors uploading packages that would be acquired by client virtual machines on their next yum update. The vulnerable infrastructure supplies all the packages for all Red Hat Enterprise Linux instances booted from the Azure marketplace.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Azure	Cloud Services	—	—
Azure	Virtual Machines	—	—

References

Public admin access to Azure's Red Hat Update Infrastructure

advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON