PT-2025-47641 · Microsoft · Azure Bastion

Published 2025-11-20 · Updated 2025-11-28 · CVE-2025-49752

Positive Technologies · (AI Summary)

CVSS v3.1

10

Critical

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Azure Bastion versions prior to November 20, 2025

Description A critical elevation of privilege flaw impacts Azure Bastion. Attackers can potentially gain higher permissions through capture-replay attacks if the system is unpatched. This allows for authentication bypass.

Recommendations Restrict access to Azure Bastion. Monitor logs for suspicious activity. Enable Multi-Factor Authentication (MFA). Update Azure Bastion to the version released on November 20, 2025.

Fix

LPE

Weakness Enumeration

CWE-294

Related Identifiers

BDU:2025-15486

CVE-2025-49752

Affected Products

Azure Bastion

References · 19

• https://bdu.fstec.ru/vul/2025-15486 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49752 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49752 · Security Note
• https://twitter.com/tdatwja/status/1992050980440113602 · Twitter Post
• https://twitter.com/dailytechonx/status/1993006716024144294 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1p4k1tl/top_10_trending_cves_23112025 · Reddit Post
• https://t.me/cveNotify/143513 · Telegram Post
• https://twitter.com/0x534c/status/1991742060966342920 · Twitter Post
• https://t.me/msrcreports/2282 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1p7e9v3/top_10_trending_cves_26112025 · Reddit Post
• https://twitter.com/sequretek_sqtk/status/1994436123758612676 · Twitter Post
• https://twitter.com/rapidriskradar/status/1994028901836746932 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1p74xv8/top_10_trending_cves_26112025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1p69ns0/top_10_trending_cves_25112025 · Reddit Post
• https://twitter.com/offseq/status/1991658407112098084 · Twitter Post