Elevation of Privilege Vulnerability Affects Azure Monitor Agent
CVE-2024-30060
7.8HIGH
Summary
The Azure Monitor Agent is susceptible to an elevation of privilege vulnerability that allows an attacker to gain unauthorized access to sensitive components within the system. If exploited, this vulnerability could enable attackers to manipulate system configurations and elevate their privileges, potentially leading to further exploitation of network resources. Organizations relying on Azure Monitor Agent should assess their deployments to mitigate any associated risks.
Affected Version(s)
Azure Monitor Unknown 1.0.0 < 1.26.0
References
EPSS Score
0% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre DatabaseMicrosoft Feed