PT-2024-8852 · Microsoft · Azure Stack Hci

Alex Naparu + 3 · Published 2024-10-11 · Updated 2025-01-23 · CVE-2024-49060

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

The Azure Stack HCI system is affected by an Elevation of Privilege issue, allowing users to gain higher access privileges without permission. This issue potentially puts the system at risk. Exploit information is available, and details can be found at provided links, such as https://t.co/ICSQfpYjOU and https://t.co/k29BKtEtIl. Unfortunately, specific versions of Azure Stack HCI that are affected are not mentioned. However, it is known that this issue affects Azure Stack HCI systems, and users are advised to check the provided links for more information and patches. #AzureStackHCISecurity #ElevationOfPrivilege #AzureSecurity #HCISecurity #CloudSecurity #MicrosoftAzure #PrivilegeEscalation

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2024-10491

CVE-2024-49060

Affected Products

Azure Stack Hci

References · 10

• https://osv.dev/vulnerability/CVE-2024-49060 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49060 · Security Note
• https://bdu.fstec.ru/vul/2024-10491 · Security Note
• https://t.me/cvedetector/11183 · Telegram Post
• https://twitter.com/windowsforum/status/1857534238087672265 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1857681427942215773 · Twitter Post
• https://vuldb.com/?id.284865 · Note
• https://t.me/cvenotify/108352 · Telegram Post
• https://twitter.com/windowsforum/status/1858922197802201346 · Twitter Post