Описание
Azure Functions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.
An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.
This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions.
FAQ
How do I get the Azure Functions update?
Re-start your Azure Functions app to get the latest version with the security update.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
<p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.</p> <p>This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions.</p>
An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions., aka 'Azure Functions Elevation of Privilege Vulnerability'.
Уязвимость службы Azure Functions операционной системы Windows, позволяющая нарушителю повысить свои привилегии
EPSS
5.3 Medium
CVSS3