Azure Functions
CVE-2024-38204
MEDIUM
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-284. Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network. Affected products include: Microsoft Azure Functions.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Azure Functions
View allMissing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate p
Azure Function Information Disclosure Vulnerability [CVSS 8.2 HIGH]
Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute c
<p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthentic
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today