CVE-2024-20679
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A spoofing vulnerability in Azure Stack Hub allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Risk Assessment
The risk involves potential social engineering attacks and data theft within an environment using Azure Stack Hub.
Recommendation
It is recommended to apply the security updates provided by Microsoft for Azure Stack Hub immediately.
Other vulnerabilities in Azure Stack Hub
See all- CVE-2024-38220Critical
A vulnerability in Azure Stack Hub allows elevation of privilege. An attacker could exploit it to gain higher privileges in the Azure Stack Hub environment.
- CVE-2024-38216High
Vulnerability in Azure Stack Hub allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to resources or administrative functions.
Original NVD description (English source)
Azure Stack Hub Spoofing Vulnerability