PT-2025-32316 · Microsoft · Azure Portal

Nxhoang99 · Publicado 2025-08-07 · Atualizado 2025-09-09 · CVE-2025-53792

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Azure Portal (affected versions not specified)

Description An elevation of privilege issue exists within the Azure Portal. This allows for unauthorized access and potential compromise of resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

BDU:2025-10037

CVE-2025-53792

Produtos afetados

Azure Portal

Referências · 10

• https://reddit.com/r/cybersecurity/comments/1nc6cxq/after_cve202553792_how_attackers_might_quickly · Publicação no Reddit
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53792 · Aviso do Fabricante
• https://twitter.com/collysucker/status/1955213053638709490 · Publicação no Twitter
• https://twitter.com/windowsforum/status/1953576477003276294 · Publicação no Twitter
• https://t.me/msrcreports/2099 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2025-10037 · Nota de Segurança
• https://t.me/cveNotify/132303 · Publicação no Telegram
• https://t.me/CVEtracker/29471 · Publicação no Telegram
• https://twitter.com/offseq/status/1953675148487225431 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-53792 · Nota de Segurança