VDB

GCVE-110-CLOUD-2024-0021

GCVE-110-CLOUD-2024-0021
Advisory Published
Vulnetix · Advisory published August 19, 2024
A vulnerability in Azure Kubernetes Services allowed attackers to escalate privileges and access cluster credentials. Affected clusters used Azure CNI for network configuration and Azure for network policy. Attackers could exploit this issue to steal data and cause financial and reputational damage. The vulnerability has been fixed by Microsoft after disclosure by Mandiant.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
AzureAzure Kubernetes Services——
AzureAKS——
AzureCloud Services——

References

WireServing Up Credentials in Azure Kubernetes Services
advisory
advisory

Browse GCVE Records

74,557 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›