ZDI-24-993: Microsoft Azure myapiendpoint.developer.azure-api Improper Access Control Information Disclosure Vulnerability
Published Jul 29, 2024
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.
Affected Software
1 affected component
Microsoft Azure
Event History
Jul 29, 2024
Advisory Published
via ZDI·05:00 AM
Data Sourced
via ZDI·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-24-993?
The severity of ZDI-24-993 is rated at 7.5 on the CVSS scale, indicating a high level of risk.
2
What type of vulnerability is ZDI-24-993?
ZDI-24-993 is a remote information disclosure vulnerability affecting Microsoft Azure.
3
Is authentication required to exploit ZDI-24-993?
No, authentication is not required to exploit the ZDI-24-993 vulnerability.
4
What should I do if my system is affected by ZDI-24-993?
It is recommended to apply any available patches or mitigations from Microsoft to address ZDI-24-993.
5
Who is affected by ZDI-24-993?
Organizations using Microsoft Azure are affected by ZDI-24-993 and should assess their installations for risk.