CVE-2025-21380: Azure Marketplace SaaS Resources Information Disclosure Vulnerability
Published Jan 9, 2025
·Updated
Azure Marketplace SaaS Resources Information Disclosure Vulnerability
Other sources
Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.
— Microsoft
Affected Software
2 affected components
Microsoft Marketplace SaaS
Microsoft Azure Marketplace
Event History
Jan 9, 2025
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·10:32 PM
Data Sourced
via MITRE·10:32 PM
DescriptionSeverity
Jan 15, 2025
News Published
via The Register·01:33 AM
News Published
via The Register·01:36 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-21380?
CVE-2025-21380 has been classified as a medium severity vulnerability due to improper access control.
2
How do I fix CVE-2025-21380?
To fix CVE-2025-21380, ensure that proper access controls are configured for Azure SaaS Resources.
3
What kind of information can be disclosed due to CVE-2025-21380?
CVE-2025-21380 can lead to the exposure of sensitive information over a network by authorized attackers.
4
Who is affected by CVE-2025-21380?
CVE-2025-21380 affects users of Microsoft Azure Marketplace SaaS Resources.
5
Is there a patch available for CVE-2025-21380?
Yes, Microsoft has released a patch to address CVE-2025-21380 that users should apply promptly.