Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2022-35812 (GCVE-0-2022-35812)
Vulnerability from cvelistv5 – Published: 2022-08-09 00:00 – Updated: 2025-01-02 19:34
VLAI?
EPSS
Title
Azure Site Recovery Elevation of Privilege Vulnerability
Summary
Azure Site Recovery Elevation of Privilege Vulnerability
Severity ?
CWE
- Elevation of Privilege
Assigner
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Microsoft | Azure Site Recovery VMWare to Azure |
Affected:
9.0 , < 9.50
(custom)
|
Date Public ?
2022-08-09 07:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T09:44:21.953Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "Azure Site Recovery Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"platforms": [
"Unknown"
],
"product": "Azure Site Recovery VMWare to Azure",
"vendor": "Microsoft",
"versions": [
{
"lessThan": "9.50",
"status": "affected",
"version": "9.0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:*:*:*:*",
"versionEndExcluding": "9.50",
"versionStartIncluding": "9.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"datePublic": "2022-08-09T07:00:00.000Z",
"descriptions": [
{
"lang": "en-US",
"value": "Azure Site Recovery Elevation of Privilege Vulnerability"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Elevation of Privilege",
"lang": "en-US",
"type": "Impact"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-02T19:34:45.554Z",
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft"
},
"references": [
{
"name": "Azure Site Recovery Elevation of Privilege Vulnerability",
"tags": [
"vendor-advisory"
],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
}
],
"title": "Azure Site Recovery Elevation of Privilege Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"assignerShortName": "microsoft",
"cveId": "CVE-2022-35812",
"datePublished": "2022-08-09T00:00:00.000Z",
"dateReserved": "2022-07-13T00:00:00.000Z",
"dateUpdated": "2025-01-02T19:34:45.554Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-35812",
"date": "2026-04-25",
"epss": "0.12951",
"percentile": "0.94094"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:vmware_to_azure:*:*:*\", \"versionEndExcluding\": \"9.50.6419.1\", \"matchCriteriaId\": \"4778DCB4-5D90-4F26-801F-AC0A2E6EFEAB\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Azure Site Recovery Elevation of Privilege Vulnerability\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad de Elevaci\\u00f3n de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790, CVE-2022-35791, CVE-2022-35799, CVE-2022-35800, CVE-2022-35801, CVE-2022-35802, CVE-2022-35807, CVE-2022-35808, CVE-2022-35809, CVE-2022-35810, CVE-2022-35811, CVE-2022-35813, CVE-2022-35814, CVE-2022-35815, CVE-2022-35816, CVE-2022-35817, CVE-2022-35818, CVE-2022-35819\"}]",
"id": "CVE-2022-35812",
"lastModified": "2024-11-21T07:11:44.227",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"secure@microsoft.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.9, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.9, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 1.2, \"impactScore\": 3.6}]}",
"published": "2022-08-09T20:15:14.567",
"references": "[{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812\", \"source\": \"secure@microsoft.com\"}, {\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-35812\",\"sourceIdentifier\":\"secure@microsoft.com\",\"published\":\"2022-08-09T20:15:14.567\",\"lastModified\":\"2024-11-21T07:11:44.227\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Azure Site Recovery Elevation of Privilege Vulnerability\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de Elevaci\u00f3n de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790, CVE-2022-35791, CVE-2022-35799, CVE-2022-35800, CVE-2022-35801, CVE-2022-35802, CVE-2022-35807, CVE-2022-35808, CVE-2022-35809, CVE-2022-35810, CVE-2022-35811, CVE-2022-35813, CVE-2022-35814, CVE-2022-35815, CVE-2022-35816, CVE-2022-35817, CVE-2022-35818, CVE-2022-35819\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secure@microsoft.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:vmware_to_azure:*:*:*\",\"versionEndExcluding\":\"9.50.6419.1\",\"matchCriteriaId\":\"4778DCB4-5D90-4F26-801F-AC0A2E6EFEAB\"}]}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812\",\"source\":\"secure@microsoft.com\"},{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2022-AVI-731
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Microsoft Azure. Elles permettent à un attaquant de provoquer un déni de service, une élévation de privilèges, une atteinte à la confidentialité des données et une exécution de code à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Azure Site Recovery VMWare to Azure",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Sphere",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Batch",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Real Time Operating System GUIX Studio",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-35821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35821"
},
{
"name": "CVE-2022-35772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35772"
},
{
"name": "CVE-2022-35808",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35808"
},
{
"name": "CVE-2022-35815",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35815"
},
{
"name": "CVE-2022-35788",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35788"
},
{
"name": "CVE-2022-35783",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35783"
},
{
"name": "CVE-2022-35807",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35807"
},
{
"name": "CVE-2022-35812",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35812"
},
{
"name": "CVE-2022-35818",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35818"
},
{
"name": "CVE-2022-35790",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35790"
},
{
"name": "CVE-2022-35799",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35799"
},
{
"name": "CVE-2022-35802",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35802"
},
{
"name": "CVE-2022-35789",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35789"
},
{
"name": "CVE-2022-35801",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35801"
},
{
"name": "CVE-2022-35787",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35787"
},
{
"name": "CVE-2022-35819",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35819"
},
{
"name": "CVE-2022-35816",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35816"
},
{
"name": "CVE-2022-35810",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35810"
},
{
"name": "CVE-2022-35785",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35785"
},
{
"name": "CVE-2022-35775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35775"
},
{
"name": "CVE-2022-35780",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35780"
},
{
"name": "CVE-2022-30175",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30175"
},
{
"name": "CVE-2022-35776",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35776"
},
{
"name": "CVE-2022-35809",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35809"
},
{
"name": "CVE-2022-35811",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35811"
},
{
"name": "CVE-2022-34687",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34687"
},
{
"name": "CVE-2022-35814",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35814"
},
{
"name": "CVE-2022-35782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35782"
},
{
"name": "CVE-2022-34685",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34685"
},
{
"name": "CVE-2022-35781",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35781"
},
{
"name": "CVE-2022-35800",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35800"
},
{
"name": "CVE-2022-35817",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35817"
},
{
"name": "CVE-2022-34686",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34686"
},
{
"name": "CVE-2022-35774",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35774"
},
{
"name": "CVE-2022-35813",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35813"
},
{
"name": "CVE-2022-35824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35824"
},
{
"name": "CVE-2022-35786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35786"
},
{
"name": "CVE-2022-35791",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35791"
},
{
"name": "CVE-2022-35779",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35779"
},
{
"name": "CVE-2022-35806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35806"
},
{
"name": "CVE-2022-35784",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35784"
},
{
"name": "CVE-2022-33646",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33646"
},
{
"name": "CVE-2022-30176",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30176"
},
{
"name": "CVE-2022-35773",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35773"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35800 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35800"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33646 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33646"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30176 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30176"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35818 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35818"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35807 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35807"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35772 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35772"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35785 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35785"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30175 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30175"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35775 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35775"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35790 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35790"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35814 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35814"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35779 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35779"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35786 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35786"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35811 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35811"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35819 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35819"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35815 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35815"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35780 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35780"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35774 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35774"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35812 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34686 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34686"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35783 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35783"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35817 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35817"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35782 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35782"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34687 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34687"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34685 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34685"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35806 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35806"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35789 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35789"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35776 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35776"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35821 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35821"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35787 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35787"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35801 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35801"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35773 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35773"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35810 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35810"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35788 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35788"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35816 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35816"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35802 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35802"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35791 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35791"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35824 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35824"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35808 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35808"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35781 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35781"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35813 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35813"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35809 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35809"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35784 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35784"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35799 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35799"
}
],
"reference": "CERTFR-2022-AVI-731",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-08-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Azure\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer un d\u00e9ni de service, une \u00e9l\u00e9vation de privil\u00e8ges, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une ex\u00e9cution de code \u00e0\ndistance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
CERTFR-2022-AVI-731
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été corrigées dans Microsoft Azure. Elles permettent à un attaquant de provoquer un déni de service, une élévation de privilèges, une atteinte à la confidentialité des données et une exécution de code à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Azure Site Recovery VMWare to Azure",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Sphere",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Batch",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
},
{
"description": "Azure Real Time Operating System GUIX Studio",
"product": {
"name": "Azure",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-35821",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35821"
},
{
"name": "CVE-2022-35772",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35772"
},
{
"name": "CVE-2022-35808",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35808"
},
{
"name": "CVE-2022-35815",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35815"
},
{
"name": "CVE-2022-35788",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35788"
},
{
"name": "CVE-2022-35783",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35783"
},
{
"name": "CVE-2022-35807",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35807"
},
{
"name": "CVE-2022-35812",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35812"
},
{
"name": "CVE-2022-35818",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35818"
},
{
"name": "CVE-2022-35790",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35790"
},
{
"name": "CVE-2022-35799",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35799"
},
{
"name": "CVE-2022-35802",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35802"
},
{
"name": "CVE-2022-35789",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35789"
},
{
"name": "CVE-2022-35801",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35801"
},
{
"name": "CVE-2022-35787",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35787"
},
{
"name": "CVE-2022-35819",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35819"
},
{
"name": "CVE-2022-35816",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35816"
},
{
"name": "CVE-2022-35810",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35810"
},
{
"name": "CVE-2022-35785",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35785"
},
{
"name": "CVE-2022-35775",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35775"
},
{
"name": "CVE-2022-35780",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35780"
},
{
"name": "CVE-2022-30175",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30175"
},
{
"name": "CVE-2022-35776",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35776"
},
{
"name": "CVE-2022-35809",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35809"
},
{
"name": "CVE-2022-35811",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35811"
},
{
"name": "CVE-2022-34687",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34687"
},
{
"name": "CVE-2022-35814",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35814"
},
{
"name": "CVE-2022-35782",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35782"
},
{
"name": "CVE-2022-34685",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34685"
},
{
"name": "CVE-2022-35781",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35781"
},
{
"name": "CVE-2022-35800",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35800"
},
{
"name": "CVE-2022-35817",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35817"
},
{
"name": "CVE-2022-34686",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34686"
},
{
"name": "CVE-2022-35774",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35774"
},
{
"name": "CVE-2022-35813",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35813"
},
{
"name": "CVE-2022-35824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35824"
},
{
"name": "CVE-2022-35786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35786"
},
{
"name": "CVE-2022-35791",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35791"
},
{
"name": "CVE-2022-35779",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35779"
},
{
"name": "CVE-2022-35806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35806"
},
{
"name": "CVE-2022-35784",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35784"
},
{
"name": "CVE-2022-33646",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-33646"
},
{
"name": "CVE-2022-30176",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-30176"
},
{
"name": "CVE-2022-35773",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35773"
}
],
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35800 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35800"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-33646 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33646"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30176 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30176"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35818 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35818"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35807 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35807"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35772 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35772"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35785 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35785"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-30175 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30175"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35775 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35775"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35790 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35790"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35814 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35814"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35779 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35779"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35786 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35786"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35811 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35811"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35819 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35819"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35815 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35815"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35780 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35780"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35774 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35774"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35812 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34686 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34686"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35783 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35783"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35817 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35817"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35782 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35782"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34687 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34687"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-34685 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34685"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35806 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35806"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35789 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35789"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35776 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35776"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35821 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35821"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35787 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35787"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35801 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35801"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35773 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35773"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35810 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35810"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35788 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35788"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35816 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35816"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35802 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35802"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35791 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35791"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35824 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35824"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35808 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35808"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35781 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35781"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35813 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35813"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35809 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35809"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35784 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35784"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2022-35799 du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35799"
}
],
"reference": "CERTFR-2022-AVI-731",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-08-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMicrosoft Azure\u003c/span\u003e. Elles permettent \u00e0 un attaquant\nde provoquer un d\u00e9ni de service, une \u00e9l\u00e9vation de privil\u00e8ges, une\natteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une ex\u00e9cution de code \u00e0\ndistance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Azure",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft du 09 ao\u00fbt 2022",
"url": "https://msrc.microsoft.com/update-guide/"
}
]
}
FKIE_CVE-2022-35812
Vulnerability from fkie_nvd - Published: 2022-08-09 20:15 - Updated: 2024-11-21 07:11
Severity ?
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Summary
Azure Site Recovery Elevation of Privilege Vulnerability
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| microsoft | azure_site_recovery | * |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:vmware_to_azure:*:*:*",
"matchCriteriaId": "4778DCB4-5D90-4F26-801F-AC0A2E6EFEAB",
"versionEndExcluding": "9.50.6419.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Azure Site Recovery Elevation of Privilege Vulnerability"
},
{
"lang": "es",
"value": "Una vulnerabilidad de Elevaci\u00f3n de Privilegios en Azure Site Recovery. Este ID de CVE es diferente de CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790, CVE-2022-35791, CVE-2022-35799, CVE-2022-35800, CVE-2022-35801, CVE-2022-35802, CVE-2022-35807, CVE-2022-35808, CVE-2022-35809, CVE-2022-35810, CVE-2022-35811, CVE-2022-35813, CVE-2022-35814, CVE-2022-35815, CVE-2022-35816, CVE-2022-35817, CVE-2022-35818, CVE-2022-35819"
}
],
"id": "CVE-2022-35812",
"lastModified": "2024-11-21T07:11:44.227",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6,
"source": "secure@microsoft.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Secondary"
}
]
},
"published": "2022-08-09T20:15:14.567",
"references": [
{
"source": "secure@microsoft.com",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
}
],
"sourceIdentifier": "secure@microsoft.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
BDU:2022-05282
Vulnerability from fstec - Published: 09.08.2022
VLAI Severity ?
Title
Уязвимость средства аварийного восстановления для виртуальных машин Azure Site Recovery VMWare to Azure, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии
Description
Уязвимость средства аварийного восстановления для виртуальных машин Azure Site Recovery VMWare to Azure связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои привилегии
Severity ?
Vendor
Microsoft Corp
Software Name
Azure Site Recovery VMWare to Azure
Software Version
до 9.50 (Azure Site Recovery VMWare to Azure)
Possible Mitigations
Использование рекомендаций производителя:
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35812
Reference
https://nvd.nist.gov/vuln/detail/CVE-2022-35812
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35812
CWE
CWE-264
{
"CVSS 2.0": "AV:N/AC:H/Au:S/C:C/I:N/A:N",
"CVSS 3.0": "AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 9.50 (Azure Site Recovery VMWare to Azure)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35812",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.08.2022",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.08.2022",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "24.08.2022",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-05282",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-35812",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Azure Site Recovery VMWare to Azure",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Azure Site Recovery VMWare to Azure, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d Azure Site Recovery VMWare to Azure \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://nvd.nist.gov/vuln/detail/CVE-2022-35812\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35812",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,9)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)"
}
GHSA-44RF-828C-2JP5
Vulnerability from github – Published: 2022-08-10 00:00 – Updated: 2022-08-10 00:00
VLAI?
Details
Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790, CVE-2022-35791, CVE-2022-35799, CVE-2022-35800, CVE-2022-35801, CVE-2022-35802, CVE-2022-35807, CVE-2022-35808, CVE-2022-35809, CVE-2022-35810, CVE-2022-35811, CVE-2022-35813, CVE-2022-35814, CVE-2022-35815, CVE-2022-35816, CVE-2022-35817, CVE-2022-35818, CVE-2022-35819.
Severity ?
4.4 (Medium)
{
"affected": [],
"aliases": [
"CVE-2022-35812"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-08-09T20:15:00Z",
"severity": "MODERATE"
},
"details": "Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790, CVE-2022-35791, CVE-2022-35799, CVE-2022-35800, CVE-2022-35801, CVE-2022-35802, CVE-2022-35807, CVE-2022-35808, CVE-2022-35809, CVE-2022-35810, CVE-2022-35811, CVE-2022-35813, CVE-2022-35814, CVE-2022-35815, CVE-2022-35816, CVE-2022-35817, CVE-2022-35818, CVE-2022-35819.",
"id": "GHSA-44rf-828c-2jp5",
"modified": "2022-08-10T00:00:16Z",
"published": "2022-08-10T00:00:16Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-35812"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
},
{
"type": "WEB",
"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-35812"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
}
]
}
MSRC_CVE-2022-35812
Vulnerability from csaf_microsoft - Published: 2022-08-09 07:00 - Updated: 2022-08-09 07:00Summary
Azure Site Recovery Elevation of Privilege Vulnerability
Severity
Important
Notes
Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Customer Action: Required. The vulnerability documented by this CVE requires customer action to resolve.
Vendor Fix
9.50:Security Update:https://prod.support.services.microsoft.com/en-us/topic/update-rollup-63-for-azure-site-recovery-992e63af-aa94-4ea6-8d1b-2dd89a9cc70b
https://prod.support.services.microsoft.com/en-us…
References
| URL | Category | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
Acknowledgments
Anonymous
{
"document": {
"acknowledgments": [
{
"names": [
"Anonymous"
]
}
],
"aggregate_severity": {
"namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
},
{
"category": "general",
"text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
"title": "Customer Action"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2022-35812 Azure Site Recovery Elevation of Privilege Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
},
{
"category": "self",
"summary": "CVE-2022-35812 Azure Site Recovery Elevation of Privilege Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/csaf/2022/msrc_cve-2022-35812.json"
},
{
"category": "external",
"summary": "Microsoft Exploitability Index",
"url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "Azure Site Recovery Elevation of Privilege Vulnerability",
"tracking": {
"current_release_date": "2022-08-09T07:00:00.000Z",
"generator": {
"date": "2025-01-02T19:33:43.201Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2022-35812",
"initial_release_date": "2022-08-09T07:00:00.000Z",
"revision_history": [
{
"date": "2022-08-09T07:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.50",
"product": {
"name": "Azure Site Recovery VMWare to Azure \u003c9.50",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "9.50",
"product": {
"name": "Azure Site Recovery VMWare to Azure 9.50",
"product_id": "12018"
}
}
],
"category": "product_name",
"name": "Azure Site Recovery VMWare to Azure"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-35812",
"notes": [
{
"category": "general",
"text": "Microsoft",
"title": "Assigning CNA"
},
{
"category": "faq",
"text": "Successful exploitation of this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server.",
"title": "According to the CVSS metric, privileges required is high (PR:H). What privileges does an attacker require to exploit this vulnerability?"
},
{
"category": "faq",
"text": "This vulnerability could allow an attacker to disclose confidential information such as encrypted credentials but does not allow the attacker to modify any data or make the service unavailable.",
"title": "According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H) but have no effect on integrity (I:N) or on availability (A:N). What does that mean for this vulnerability?"
},
{
"category": "faq",
"text": "Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. It is a service but also has a few on-premise components. Please visit this link for more details: About Azure Site Recovery - Azure Site Recovery\nThis vulnerability applies to a VMWare-to-Azure scenario. Please visit this link for more details: VMware VM disaster recovery architecture in Azure Site Recovery - Classic - Azure Site Recovery.\nYes, please see General availability: Upgrade VMware VMs protected by Site Recovery to modernized experience for more information.",
"title": "What is Azure Site Recovery?"
}
],
"product_status": {
"fixed": [
"12018"
],
"known_affected": [
"1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-35812 Azure Site Recovery Elevation of Privilege Vulnerability - HTML",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
},
{
"category": "self",
"summary": "CVE-2022-35812 Azure Site Recovery Elevation of Privilege Vulnerability - CSAF",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2022-08-09T07:00:00.000Z",
"details": "9.50:Security Update:https://prod.support.services.microsoft.com/en-us/topic/update-rollup-63-for-azure-site-recovery-992e63af-aa94-4ea6-8d1b-2dd89a9cc70b",
"product_ids": [
"1"
],
"url": "https://prod.support.services.microsoft.com/en-us/topic/update-rollup-63-for-azure-site-recovery-992e63af-aa94-4ea6-8d1b-2dd89a9cc70b"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"environmentalsScore": 0.0,
"exploitCodeMaturity": "PROOF_OF_CONCEPT",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 4.4,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"threats": [
{
"category": "impact",
"details": "Elevation of Privilege"
},
{
"category": "exploit_status",
"details": "Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"
}
],
"title": "Azure Site Recovery Elevation of Privilege Vulnerability"
}
]
}
GSD-2022-35812
Vulnerability from gsd - Updated: 2023-12-13 01:19Details
Azure Site Recovery Elevation of Privilege Vulnerability
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2022-35812",
"description": "Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-35774, CVE-2022-35775, CVE-2022-35780, CVE-2022-35781, CVE-2022-35782, CVE-2022-35783, CVE-2022-35784, CVE-2022-35785, CVE-2022-35786, CVE-2022-35787, CVE-2022-35788, CVE-2022-35789, CVE-2022-35790, CVE-2022-35791, CVE-2022-35799, CVE-2022-35800, CVE-2022-35801, CVE-2022-35802, CVE-2022-35807, CVE-2022-35808, CVE-2022-35809, CVE-2022-35810, CVE-2022-35811, CVE-2022-35813, CVE-2022-35814, CVE-2022-35815, CVE-2022-35816, CVE-2022-35817, CVE-2022-35818, CVE-2022-35819.",
"id": "GSD-2022-35812"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2022-35812"
],
"details": "Azure Site Recovery Elevation of Privilege Vulnerability",
"id": "GSD-2022-35812",
"modified": "2023-12-13T01:19:33.369623Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2022-35812",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Azure Site Recovery VMWare to Azure",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "9.0",
"version_value": "9.50"
}
]
}
}
]
},
"vendor_name": "Microsoft"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Azure Site Recovery Elevation of Privilege Vulnerability"
}
]
},
"impact": {
"cvss": [
{
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Elevation of Privilege"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812",
"refsource": "MISC",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:microsoft:azure_site_recovery:*:*:*:*:vmware_to_azure:*:*:*",
"cpe_name": [],
"versionEndExcluding": "9.50.6419.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secure@microsoft.com",
"ID": "CVE-2022-35812"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Azure Site Recovery Elevation of Privilege Vulnerability"
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812",
"refsource": "MISC",
"tags": [],
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35812"
}
]
}
},
"impact": {
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.2,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-05-31T19:15Z",
"publishedDate": "2022-08-09T20:15Z"
}
}
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…