CVE-2023-36414 in Azure Identity SDK for .NET

Prediction

by VulDB Data Team • 10/28/2023

A flaw has been found in Microsoft Azure Identity SDK for .NET. Impacted is an unknown function. Executing a manipulation can lead to privilege escalation. The attack may be launched remotely. It is best practice to apply a patch to resolve this issue.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: Microsoft
• Reservation: 06/21/2023
• Disclosure: 10/25/2023
• Moderation: accepted
• Entry: VDB-241775
• CPE: ready
• CWE: Unknown
• CVSS: 8.8 (CNA)
• EPSS: 0.02243
• KEV: no
• Activities: very low
• Sector: Hostingprovider, Pharma, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-36414
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-36414
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-36414/