PT-2024-1811 · Microsoft · Azure Kubernetes Service Confidential Containers

Yuval Avrahami

·

Published

2024-02-13

·

Updated

2024-05-29

·

CVE-2024-21376

CVSS v3.1
9.0
VectorAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Microsoft Azure Kubernetes Service Confidential Containers (affected versions not specified)

Description:

The issue is related to insufficient input validation in the deployment and management software of Azure Kubernetes Service Confidential Containers. This can be exploited by a remote attacker to execute arbitrary code.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

RCE

Weakness Enumeration

Related Identifiers

BDU:2024-01554
CVE-2024-21376

Affected Products

Azure Kubernetes Service Confidential Containers