ZDI-23-1588: Microsoft Azure US Accelarators Synapse SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
Published Nov 6, 2023
·Updated
This vulnerability allows remote attackers to bypass authentication on Microsoft Azure. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.
Affected Software
1 affected component
Microsoft Azure
Event History
Nov 6, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-1588?
ZDI-23-1588 has been assigned a CVSS rating of 8.8, indicating a high severity level.
2
How does ZDI-23-1588 affect Microsoft Azure users?
ZDI-23-1588 allows remote attackers to bypass authentication on Microsoft Azure, posing a significant security risk.
3
Is authentication required to exploit ZDI-23-1588?
No, authentication is not required to exploit ZDI-23-1588, making it more dangerous.
4
What versions of Microsoft Azure are affected by ZDI-23-1588?
ZDI-23-1588 affects all versions of Microsoft Azure as no specific version is listed.
5
How can I protect my Azure environment from ZDI-23-1588?
To protect against ZDI-23-1588, ensure all security patches are applied and monitor for any suspicious activity.