CVE-2024-49052

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49052

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

M

issing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49052 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:azure_functions:-:*:*:*:*:*:*:*
History

05 Feb 2025, 20:36

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:azure_functions:-:*:*:*:*:*:*:*
Summary
  • (es) La falta de autenticación para una función crítica en Microsoft Azure PolicyWatch permite que un atacante no autorizado eleve privilegios en una red.
First Time Microsoft
Microsoft azure Functions
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49052 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49052 - Vendor Advisory

26 Nov 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-26 20:15

Updated : 2025-02-05 20:36

NVD link : CVE-2024-49052

Mitre link : CVE-2024-49052

CVE.ORG link : CVE-2024-49052

JSON object : View

Products Affected

microsoft

CWE
CWE-306

Missing Authentication for Critical Function