CVE-2019-1234
HIGHAzure Stack - Authentication Bypass by Spoofing via Request Validation Failure
Title source: llmDescription
A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_misc
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1234
Various Sources x_refsource_misc
https://research.checkpoint.com/2020/remote-cloud-execution-critical-vulnerabilities-in-azure-cloud-infrastructure-part-i/
Scores
CVSS v3
7.5
EPSS
0.5794
EPSS Percentile
99.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-290
Status
published
Products (1)
microsoft/azure_stack
Published
Nov 12, 2019
Tracked Since
Feb 18, 2026