Lidor B

**Name of the Vulnerable Software and Affected Versions** Azure HDInsight Apache Oozie Workflow Scheduler (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in the Azure HDInsight Apache Oozie Workflow Scheduler. It is associated with insufficient access controls in the data processing automation system. Exploitation of this issue could allow a remote attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure HDInsight (affected versions not specified) **Description** The issue is related to insufficient access controls in Azure HDInsight, allowing a remote attacker to elevate their privileges using a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure HDInsight (affected versions not specified) **Description** The issue concerns a spoofing vulnerability in Azure HDInsight Jupyter Notebook. No specific details about the technical aspects of the vulnerability, such as API endpoints, vulnerable parameters, or function names, are provided. There is no information available about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Apache Ambari (affected versions not specified) **Description** The issue is related to a spoofing vulnerability in Azure Apache Ambari. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Apache Hadoop (affected versions not specified) **Description** The issue is related to a spoofing vulnerability in Azure Apache Hadoop. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Apache Oozie (affected versions not specified) **Description** The issue concerns a spoofing vulnerability in Azure Apache Oozie. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Apache Hive (affected versions not specified) **Description** The issue concerns a spoofing vulnerability in Azure Apache Hive. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Apache Ambari versions (affected versions not specified) **Description** The issue is related to a spoofing vulnerability in Azure Apache Ambari. It is caused by improper data handling, which could allow a remote attacker to conduct spoofing attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Service Fabric (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface of the Azure Service Fabric platform. Exploitation of this issue may allow a remote attacker to perform a spoofing attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.