Elevation of Privilege Vulnerability Affects Azure Science Virtual Machine (DSVM)
CVE-2024-37325

8.1HIGH

Key Information:

Vendor

Microsoft
Status
Azure Data Science Virtual Machines
Vendor
CVE Published:
11 June 2024

What is CVE-2024-37325?

The vulnerability associated with Azure Science Virtual Machine (DSVM) allows for elevation of privilege, potentially enabling unauthorized users to gain access to higher privileges than intended within the system. This can compromise security policies and expose sensitive data. Organizations utilizing DSVM should assess their security posture and apply necessary mitigations to safeguard against exploitation.

Affected Version(s)

Azure Data Science Virtual Machines Unknown 1.0.0 < 24.05.24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.