CVE-2024-38220
CriticalCVSS 9.0Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
A vulnerability in Azure Stack Hub allows elevation of privilege. An attacker could exploit it to gain higher privileges in the Azure Stack Hub environment.
Risk Assessment
Risk of unauthorized access to resources and privilege escalation, potentially leading to integrity and confidentiality breaches in the hybrid cloud environment.
Recommendation
Apply security updates provided by Microsoft for Azure Stack Hub. Monitor security advisories and deploy patches as soon as possible.
Other vulnerabilities in Azure Stack Hub
See all- CVE-2024-38216High
Vulnerability in Azure Stack Hub allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to resources or administrative functions.
- CVE-2024-20679Medium
A spoofing vulnerability in Azure Stack Hub allows an attacker to impersonate a trusted resource or user. Exploitation could lead to tricking users and disclosing sensitive information.
Original NVD description (English source)
Azure Stack Hub Elevation of Privilege Vulnerability