MEDIUM 5.5 Microsoft
CVE-2024-35255
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Microsoft Security Update 2024-Jun: Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Affected Products
- Azure Identity Library for .NET
- Microsoft Authentication Library (MSAL) for Java
- Azure Identity Library for Go
- Microsoft Authentication Library (MSAL) for .NET
- Microsoft Authentication Library (MSAL) for Node.js
- Azure Identity Library for Java
- Azure Identity Library for JavaScript
- Azure Identity Library for C++
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255
- https://nvd.nist.gov/vuln/detail/CVE-2024-35255
This medium severity vulnerability with a CVSS score of 5.5 was published on 2024-06-11 via Microsoft. Affected: Azure Identity Library for .NET, Microsoft Authentication Library (MSAL) for Java, Azure Identity Library for Go and 5 more.
vulnfeed aggregates 9214 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.