KLA48837 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Azure Machine Learning can be exploited remotely to obtain sensitive information.
2. A security feature bypass vulnerability in Azure Service Connector can be exploited remotely to bypass security restrictions.

Original advisories

CVE-2023-28312

CVE-2023-28300

Related products

Microsoft-Azure

CVE list

CVE-2023-28312 high

CVE-2023-28300 critical

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Azure Machine LearningAzure Service Connector