CVE-2024-38092 | THREATINT

Description

Azure CycleCloud Elevation of Privilege Vulnerability

Reserved 2024-06-11 | Published 2024-07-09 | Updated 2024-12-10 | Assigner microsoft

HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Problem types

CWE-693: Protection Mechanism Failure

Product status

7.9.10 before 8.6.2

affected

8.2.0 before 8.6.2

affected

8.0.0 before 8.6.2

affected

8.6.0 before 8.6.2

affected

7.9.0 before 8.6.2

affected

7.9.3 before 8.6.2

affected

7.9.1 before 8.6.2

affected

7.9.9 before 8.6.2

affected

7.8.9 before 8.6.2

affected

7.9.11 before 8.6.2

affected

8.0.0 before 8.6.2

affected

7.9.2 before 8.6.2

affected

7.9.6 before 8.6.2

affected

7.9.4 before 8.6.2

affected

7.9.5 before 8.6.2

affected

7.9.7 before 8.6.2

affected

8.0.0 before 8.6.2

affected

8.1.0 before 8.6.2

affected

8.2.0 before 8.6.2

affected

8.1.0 before 8.6.2

affected

8.2.0 before 8.6.2

affected

8.3.0 before 8.6.2

affected

8.4.0 before 8.6.2

affected

8.4.0 before 8.6.2

affected

8.4.0 before 8.6.2

affected

8.5.0 before 8.6.2

affected

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092 (Azure CycleCloud Elevation of Privilege Vulnerability) vendor-advisory

cve.org (CVE-2024-38092)

nvd.nist.gov (CVE-2024-38092)

Download JSON