KLA62826 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Azure Storage Mover can be exploited remotely to execute arbitrary code.
2. A denial of service vulnerability in Microsoft Identity can be exploited remotely to cause denial of service.

Original advisories

CVE-2024-20676

CVE-2024-21319

Related products

Microsoft-Azure

CVE list

CVE-2024-21319 high

CVE-2024-20676 critical

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Microsoft Identity Model v7.0.0Microsoft Identity Model v7.0.0 for NugetMicrosoft Identity Model v6.0.0 for NugetAzure Storage Mover AgentMicrosoft Identity Model v5.0.0Microsoft Identity Model v6.0.0Microsoft Identity Model v5.0.0 for Nuget