Vulnerability-Lookup

CERTFR-2022-AVI-634

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été corrigées dans Microsoft Azure. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une exécution de code à distance et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	Azure	Azure Storage Blobs client library pour Python
Microsoft	Azure	Azure Site Recovery VMWare to Azure
Microsoft	Azure	Azure Storage Queues client library pour Python
Microsoft	Azure	Azure Storage Queues client library pour .NET
Microsoft	Azure	Azure Storage Blobs client library pour Java
Microsoft	Azure	Azure Storage Blobs client library pour .NET

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft du 12 juillet 2022	None	vendor-advisory
Bulletin de sécurité Microsoft CVE-2022-33642 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33676 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33663 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33664 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33673 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33666 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33662 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33655 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33653 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33671 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-30187 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33665 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33678 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33643 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33652 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33667 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33654 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33672 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33641 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33659 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-30181 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33661 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33650 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33651 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33658 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33660 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33669 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33668 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33674 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33656 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33657 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33677 du 12 juillet 2022	-	other
Bulletin de sécurité Microsoft CVE-2022-33675 du 12 juillet 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Azure Storage Blobs client library pour Python",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Site Recovery VMWare to Azure",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Storage Queues client library pour Python",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Storage Queues client library pour .NET",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Storage Blobs client library pour Java",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Azure Storage Blobs client library pour .NET",
      "product": {
        "name": "Azure",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-33664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33664"
    },
    {
      "name": "CVE-2022-33653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33653"
    },
    {
      "name": "CVE-2022-33642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33642"
    },
    {
      "name": "CVE-2022-33650",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33650"
    },
    {
      "name": "CVE-2022-30187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30187"
    },
    {
      "name": "CVE-2022-33654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33654"
    },
    {
      "name": "CVE-2022-33671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33671"
    },
    {
      "name": "CVE-2022-33661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33661"
    },
    {
      "name": "CVE-2022-33678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33678"
    },
    {
      "name": "CVE-2022-33662",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33662"
    },
    {
      "name": "CVE-2022-33674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33674"
    },
    {
      "name": "CVE-2022-33657",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33657"
    },
    {
      "name": "CVE-2022-33667",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33667"
    },
    {
      "name": "CVE-2022-30181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30181"
    },
    {
      "name": "CVE-2022-33673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33673"
    },
    {
      "name": "CVE-2022-33677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33677"
    },
    {
      "name": "CVE-2022-33643",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33643"
    },
    {
      "name": "CVE-2022-33668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33668"
    },
    {
      "name": "CVE-2022-33658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33658"
    },
    {
      "name": "CVE-2022-33675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33675"
    },
    {
      "name": "CVE-2022-33665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33665"
    },
    {
      "name": "CVE-2022-33659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33659"
    },
    {
      "name": "CVE-2022-33666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33666"
    },
    {
      "name": "CVE-2022-33655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33655"
    },
    {
      "name": "CVE-2022-33656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33656"
    },
    {
      "name": "CVE-2022-33672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33672"
    },
    {
      "name": "CVE-2022-33641",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33641"
    },
    {
      "name": "CVE-2022-33669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33669"
    },
    {
      "name": "CVE-2022-33651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33651"
    },
    {
      "name": "CVE-2022-33652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33652"
    },
    {
      "name": "CVE-2022-33660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33660"
    },
    {
      "name": "CVE-2022-33676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33676"
    },
    {
      "name": "CVE-2022-33663",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33663"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33642 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33642"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33676 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33676"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33663 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33663"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33664 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33664"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33673 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33673"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33666 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33666"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33662 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33662"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33655 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33655"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33653 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33653"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33671 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33671"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30187 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33665 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33665"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33678 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33678"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33643 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33643"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33652 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33652"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33667 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33667"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33654 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33654"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33672 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33672"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33641 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33641"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33659 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33659"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30181 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30181"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33661 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33661"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33650 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33650"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33651 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33651"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33658 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33658"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33660 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33660"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33669 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33669"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33668 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33668"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33674 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33674"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33656 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33656"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33657 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33657"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33677 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33677"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33675 du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33675"
    }
  ],
  "reference": "CERTFR-2022-AVI-634",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-07-13T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Azure\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, une\nex\u00e9cution de code \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 12 juillet 2022",
      "url": "https://msrc.microsoft.com/update-guide/"
    }
  ]
}

CVE-2022-30181 (GCVE-0-2022-30181)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:37 – Updated: 2025-07-08 15:35

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:40:47.779Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30181"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:35:57.986Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30181"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-30181",
    "datePublished": "2022-07-12T22:37:23.000Z",
    "dateReserved": "2022-05-03T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:35:57.986Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-30187 (GCVE-0-2022-30187)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:37 – Updated: 2025-07-08 15:35

Title

Azure Storage Library Information Disclosure Vulnerability

Summary

Azure Storage Library Information Disclosure Vulnerability

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Information Disclosure

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

5 products

Vendor	Product	Version
Microsoft	Azure Storage Blobs client library for .NET	Affected: 12.0.0 , < 12.13.0 (custom)
Microsoft	Azure Storage Queues client library for .NET	Affected: 12.0.0 , < 12.13.0 (custom)
Microsoft	Azure Storage Blobs client library for Java	Affected: 12.0.0 , < 12.18.0 (custom)
Microsoft	Azure Storage Queues client library for Python	Affected: 12.0.0 , < 12.4.0 (custom)
Microsoft	Azure Storage Blobs client library for Python	Affected: 12.0.0 , < 12.13.0 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T06:40:47.799Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Storage Library Information Disclosure Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-30187",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-11T16:01:30.313428Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T16:01:43.278Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Storage Blobs client library for .NET",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "12.13.0",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Storage Queues client library for .NET",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "12.13.0",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Storage Blobs client library for Java",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "12.18.0",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Storage Queues client library for Python",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "12.4.0",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Storage Blobs client library for Python",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "12.13.0",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:.net:*:*",
                  "versionEndExcluding": "12.13.0",
                  "versionStartIncluding": "12.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_storage_queue:*:*:*:*:*:.net:*:*",
                  "versionEndExcluding": "12.13.0",
                  "versionStartIncluding": "12.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:java:*:*",
                  "versionEndExcluding": "12.18.0",
                  "versionStartIncluding": "12.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:python:*:*",
                  "versionEndExcluding": "12.4.0",
                  "versionStartIncluding": "12.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:python:*:*",
                  "versionEndExcluding": "12.13.0",
                  "versionStartIncluding": "12.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Storage Library Information Disclosure Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:35:58.676Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Storage Library Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30187"
        }
      ],
      "title": "Azure Storage Library Information Disclosure Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-30187",
    "datePublished": "2022-07-12T22:37:25.000Z",
    "dateReserved": "2022-05-03T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:35:58.676Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33641 (GCVE-0-2022-33641)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:37 – Updated: 2025-07-08 15:35

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:21.265Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33641"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33641",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-11T15:11:30.494699Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T15:11:45.865Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:35:55.902Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33641"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33641",
    "datePublished": "2022-07-12T22:37:59.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:35:55.902Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33642 (GCVE-0-2022-33642)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:35

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:22.343Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33642"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33642",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-11T15:12:47.154222Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T15:13:02.483Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:35:56.545Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33642"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33642",
    "datePublished": "2022-07-12T22:38:01.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:35:56.545Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33643 (GCVE-0-2022-33643)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:35

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33643",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-30T18:42:02.645258Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:16:02.915Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:22.571Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33643"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:35:57.253Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33643"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33643",
    "datePublished": "2022-07-12T22:38:03.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:35:57.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33650 (GCVE-0-2022-33650)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:36

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:21.163Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33650"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:36:27.258Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33650"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33650",
    "datePublished": "2022-07-12T22:38:06.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:36:27.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33651 (GCVE-0-2022-33651)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:36

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33651",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-17T19:18:09.917326Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-17T19:18:18.194Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:22.468Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33651"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:36:27.943Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33651"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33651",
    "datePublished": "2022-07-12T22:38:07.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:36:27.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33652 (GCVE-0-2022-33652)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:36

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33652",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-04T00:37:31.858879Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:16:01.640Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:21.263Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33652"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:36:28.586Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33652"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33652",
    "datePublished": "2022-07-12T22:38:09.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:36:28.586Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33653 (GCVE-0-2022-33653)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:36

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33653",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-30T18:41:39.821489Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:16:00.771Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:21.285Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33653"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:36:29.221Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33653"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33653",
    "datePublished": "2022-07-12T22:38:10.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:36:29.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-33654 (GCVE-0-2022-33654)

Vulnerability from cvelistv5 – Published: 2022-07-12 22:38 – Updated: 2025-07-08 15:36

Title

Azure Site Recovery Elevation of Privilege Vulnerability

Summary

Azure Site Recovery Elevation of Privilege Vulnerability

Severity

4.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

CWE

Elevation of Privilege

Assigner

microsoft

References

1 reference

URL	Tags
https://msrc.microsoft.com/update-guide/vulnerabi…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Microsoft	Azure Site Recovery VMWare to Azure	Affected: 9.0 , < 9.49 (custom)

Date Public

2022-07-12 07:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-33654",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-29T18:49:37.660495Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:16:03.751Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T08:09:22.382Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33654"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "Unknown"
          ],
          "product": "Azure Site Recovery VMWare to Azure",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "9.49",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "9.49",
                  "versionStartIncluding": "9.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2022-07-12T07:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Azure Site Recovery Elevation of Privilege Vulnerability"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Elevation of Privilege",
              "lang": "en-US",
              "type": "Impact"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-08T15:36:29.864Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "Azure Site Recovery Elevation of Privilege Vulnerability",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33654"
        }
      ],
      "title": "Azure Site Recovery Elevation of Privilege Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2022-33654",
    "datePublished": "2022-07-12T22:38:12.000Z",
    "dateReserved": "2022-06-14T00:00:00.000Z",
    "dateUpdated": "2025-07-08T15:36:29.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2022-AVI-634

Solution

CVE-2022-30181 (GCVE-0-2022-30181)

CVE-2022-30187 (GCVE-0-2022-30187)

CVE-2022-33641 (GCVE-0-2022-33641)

CVE-2022-33642 (GCVE-0-2022-33642)

CVE-2022-33643 (GCVE-0-2022-33643)

CVE-2022-33650 (GCVE-0-2022-33650)

CVE-2022-33651 (GCVE-0-2022-33651)

CVE-2022-33652 (GCVE-0-2022-33652)

CVE-2022-33653 (GCVE-0-2022-33653)

CVE-2022-33654 (GCVE-0-2022-33654)

Tags

Sightings

Nomenclature