First published: Thu Jan 09 2025(Updated: )
<p>Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.</p>
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Marketplace SaaS | ||
Microsoft Azure Marketplace |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-21380 has been classified as a medium severity vulnerability due to improper access control.
To fix CVE-2025-21380, ensure that proper access controls are configured for Azure SaaS Resources.
CVE-2025-21380 can lead to the exposure of sensitive information over a network by authorized attackers.
CVE-2025-21380 affects users of Microsoft Azure Marketplace SaaS Resources.
Yes, Microsoft has released a patch to address CVE-2025-21380 that users should apply promptly.