CVE-2024-35255
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
A vulnerability in Azure Identity Libraries and Microsoft Authentication Library (MSAL) allows elevation of privilege. An attacker can exploit this flaw to gain unauthorized access to resources protected by Azure Active Directory.
Risk Assessment
The organization faces the risk of account or application takeover, potentially leading to data breaches, unauthorized access to Azure services, and system integrity compromise.
Recommendation
Immediately update Azure Identity Libraries and MSAL to the latest versions available from official Microsoft repositories. Additionally, review authentication configurations and monitor for unusual activity.
Original NVD description (English source)
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability