{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Felix Boulet with \u003ca href=\"https://www.cyber.gouv.qc.ca/\"\u003eCentre gouvernemental de cyberd\u0026#233;fense (CGCD)\u003c/a\u003e"
        ]
      },
      {
        "names": [
          "Mathieu Fiore Laroche with \u003ca href=\"https://www.cyber.gouv.qc.ca/\"\u003eCentre gouvernemental de cyberd\u0026#233;fense (CGCD)\u003c/a\u003e"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.microsoft.com/en-us/msrc/security-update-severity-rating-system",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      },
      {
        "category": "general",
        "text": "Required. The vulnerability documented by this CVE requires customer action to resolve.",
        "title": "Customer Action"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability - HTML",
        "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38108"
      },
      {
        "category": "self",
        "summary": "CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability - CSAF",
        "url": "https://msrc.microsoft.com/csaf/2024/msrc_cve-2024-38108.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Exploitability Index",
        "url": "https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Azure Stack Hub Spoofing Vulnerability",
    "tracking": {
      "current_release_date": "2024-08-13T07:00:00.000Z",
      "generator": {
        "date": "2024-12-31T22:30:41.175Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2024-38108",
      "initial_release_date": "2024-08-13T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-08-13T07:00:00.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_version_range",
            "name": "\u003c1.2311.1.22",
            "product": {
              "name": "Azure Stack Hub \u003c1.2311.1.22",
              "product_id": "1"
            }
          },
          {
            "category": "product_version",
            "name": "1.2311.1.22",
            "product": {
              "name": "Azure Stack Hub 1.2311.1.22",
              "product_id": "11950"
            }
          }
        ],
        "category": "product_name",
        "name": "Azure Stack Hub"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-38108",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "notes": [
        {
          "category": "general",
          "text": "Microsoft",
          "title": "Assigning CNA"
        },
        {
          "category": "faq",
          "text": "A cross-site scripting vulnerability existed in virtual public IP address that impacted related endpoints. For more information on the impacted virtual public IP address, see here: What is IP address 168.63.129.16? | Microsoft Learn. An unauthenticated attacker could exploit this vulnerability by getting the victim to load malicious code into their web browser on the virtual machine, allowing the attacker to leverage an implicit identity of the virtual machine. The victim\u0027s web browser then would determine which host endpoints are accessible.",
          "title": "How could an attacker exploit this vulnerability?"
        },
        {
          "category": "faq",
          "text": "A user (victim) logged on to a virtual machine would need to be tricked for the virtual machine to explicitly download and execute a malicious code in their web browser.",
          "title": "According to CVSS metrics the user interaction is required (UI:R). What interaction would a user have to do?"
        },
        {
          "category": "faq",
          "text": "By sending a specially crafted request to the vulnerable virtual public IP address, the attacker is able to load malicious code into a victim\u0027s browser without having any direct access or connection.",
          "title": "According to the CVSS metric, the successful exploitation of this vulnerability could lead to a scope change (S:C). What does this mean for this vulnerability?"
        }
      ],
      "product_status": {
        "fixed": [
          "11950"
        ],
        "known_affected": [
          "1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability - HTML",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38108"
        },
        {
          "category": "self",
          "summary": "CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability - CSAF",
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38108"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-08-13T07:00:00.000Z",
          "details": "1.2311.1.22:Security Update:https://learn.microsoft.com/en-us/azure-stack/operator/release-notes?view=azs-2311",
          "product_ids": [
            "1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure-stack/operator/release-notes?view=azs-2311"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalsScore": 0.0,
            "exploitCodeMaturity": "UNPROVEN",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "remediationLevel": "OFFICIAL_FIX",
            "reportConfidence": "CONFIRMED",
            "scope": "CHANGED",
            "temporalScore": 8.1,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "products": [
            "1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Spoofing"
        },
        {
          "category": "exploit_status",
          "details": "Exploited:No;Latest Software Release:Exploitation Less Likely"
        }
      ],
      "title": "Azure Stack Hub Spoofing Vulnerability"
    }
  ]
}