KLA48559 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to spoof user interface.

Below is a complete list of vulnerabilities:

1. A spoofing vulnerability in Service Fabric Explorer can be exploited remotely to spoof user interface.
2. A spoofing vulnerability in Azure Apache Ambari can be exploited remotely to spoof user interface.

Original advisories

CVE-2023-23383

CVE-2023-23408

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Windows

Microsoft-Azure

CVE list

CVE-2023-23383 warning

CVE-2023-23408 warning

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Azure Service Fabric 9.1 for UbuntuAzure Service Fabric 9.1 for WindowsAzure HDInsights