Azure Cyclecloud
Monthly
Privilege escalation in Microsoft Azure CycleCloud (versions prior to 8.9.1) allows an authenticated low-privilege network attacker to elevate to higher privilege levels due to missing authorization checks (CWE-862). The CVSS 8.8 score reflects high impact across confidentiality, integrity, and availability with no user interaction required, though exploitation demands valid credentials. No public exploit has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog, though SSVC rates the technical impact as total.
Information disclosure in Azure CycleCloud allows an authenticated network attacker to bypass authorization checks and read sensitive data. Rooted in CWE-862 (Missing Authorization), the flaw affects versions up to 8.9.2 and is exploitable by any authorized user who can reach the service over a network without elevated privileges. No public exploit or CISA KEV listing has been identified at time of analysis, and Microsoft has released a patch.
Azure CycleCloud Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity.
Azure CycleCloud Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
Azure CycleCloud Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated medium severity (CVSS 4.0), this vulnerability is no authentication required, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).
Privilege escalation in Microsoft Azure CycleCloud (versions prior to 8.9.1) allows an authenticated low-privilege network attacker to elevate to higher privilege levels due to missing authorization checks (CWE-862). The CVSS 8.8 score reflects high impact across confidentiality, integrity, and availability with no user interaction required, though exploitation demands valid credentials. No public exploit has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog, though SSVC rates the technical impact as total.
Information disclosure in Azure CycleCloud allows an authenticated network attacker to bypass authorization checks and read sensitive data. Rooted in CWE-862 (Missing Authorization), the flaw affects versions up to 8.9.2 and is exploitable by any authorized user who can reach the service over a network without elevated privileges. No public exploit or CISA KEV listing has been identified at time of analysis, and Microsoft has released a patch.
Azure CycleCloud Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity.
Azure CycleCloud Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
Azure CycleCloud Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated medium severity (CVSS 4.0), this vulnerability is no authentication required, low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.
Azure CycleCloud Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).