Elevation of Privilege Vulnerability Affects Azure Monitor Agent
CVE-2024-30060

7.8HIGH

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
16 May 2024

Summary

The Azure Monitor Agent is susceptible to an elevation of privilege vulnerability that allows an attacker to gain unauthorized access to sensitive components within the system. If exploited, this vulnerability could enable attackers to manipulate system configurations and elevate their privileges, potentially leading to further exploitation of network resources. Organizations relying on Azure Monitor Agent should assess their deployments to mitigate any associated risks.

Affected Version(s)

Azure Monitor Unknown 1.0.0 < 1.26.0

References

EPSS Score

0% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed
.