Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
CVE-2024-38188
7.1HIGH
Summary
The vulnerability in Azure Network Watcher VM Agent relates to an elevation of privilege issue, which can be exploited by attackers to gain unauthorized access to sensitive system resources. Successfully leveraging this exploit could lead to severe implications for system security and integrity. As a critical component of Microsoft's Azure infrastructure, the VM Agent requires immediate attention to mitigate risks associated with unauthorized access.
Affected Version(s)
Azure Network Watcher VM Extension Unknown 1.4.3320.1
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre DatabaseMicrosoft Feed