CVE-2024-28917 Vulnerability Details
/
/
/
CVE-2024-28917 Metadata Quick Info
CVE Published: 09/04/2024 |
CVE Updated: 09/10/2024 |
CVE Year: 2024
Source: microsoft |
Vendor: Microsoft |
Product: Azure Arc Extension
Status : PUBLISHED
CVE-2024-28917 Description
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
Metrics
CVSS Version: 3.1 |
Base Score: 6.2 MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
l➤ Exploitability Metrics:
Attack Vector (AV)*
Attack Complexity (AC)*
Privileges Required (PR)*
User Interaction (UI)*
Scope (S)*
l➤ Impact Metrics:
Confidentiality Impact (C)*
Integrity Impact (I)*
Availability Impact (A)*
Weakness Enumeration (CWE)
CWE-ID: CWE-284
CWE Name: CWE-284: Improper Access Control
Source: Microsoft
Common Attack Pattern Enumeration and Classification (CAPEC)
CAPEC-ID:
CAPEC Description: