Azure Monitor Agent Metrics Extension
Monthly
Privilege escalation in Microsoft's Azure Monitor Agent (specifically the Metrics Extension) lets an unauthenticated attacker on an adjacent network gain elevated privileges by exploiting improper TLS certificate validation (CWE-295). Because the agent fails to properly verify the certificate of the endpoint it communicates with, an attacker positioned on the same broadcast/logical network segment can impersonate a trusted server and hijack the agent's privileged context, yielding high confidentiality, integrity, and availability impact. Microsoft rates it CVSS 8.8; there is currently no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local privilege escalation in Azure Monitor Agent Metrics Extension (versions below 1.42.0) allows an authenticated low-privileged local attacker to elevate privileges by exploiting an untrusted search path condition (CWE-426). The agent process resolves executable or library paths from an attacker-controllable location, enabling substitution of malicious code that executes in a higher-privileged security context (S:C). No public exploit code has been identified at time of analysis, and EPSS stands at 0.05% (17th percentile), indicating minimal observed exploitation pressure.
Privilege escalation in Microsoft's Azure Monitor Agent (specifically the Metrics Extension) lets an unauthenticated attacker on an adjacent network gain elevated privileges by exploiting improper TLS certificate validation (CWE-295). Because the agent fails to properly verify the certificate of the endpoint it communicates with, an attacker positioned on the same broadcast/logical network segment can impersonate a trusted server and hijack the agent's privileged context, yielding high confidentiality, integrity, and availability impact. Microsoft rates it CVSS 8.8; there is currently no public exploit identified at time of analysis and it is not listed in CISA KEV.
Local privilege escalation in Azure Monitor Agent Metrics Extension (versions below 1.42.0) allows an authenticated low-privileged local attacker to elevate privileges by exploiting an untrusted search path condition (CWE-426). The agent process resolves executable or library paths from an attacker-controllable location, enabling substitution of malicious code that executes in a higher-privileged security context (S:C). No public exploit code has been identified at time of analysis, and EPSS stands at 0.05% (17th percentile), indicating minimal observed exploitation pressure.