CVE-2024-35255

MEDIUM

Microsoft Authentication Library and Azure Identity SDK - Elevation of Privilege via Race Condition

Title source: llm
STIX 2.1

Description

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 44.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-362
Status published
Products (17)
Azure/azure-sdk-for-go 0 - 1.6.0-beta.4.0.20240610221955-50774cd97099Go
azure/identity 0 - 4.2.1npm
azure/msal-node 2.7.0 - 2.9.2npm
com.azure/azure-identity 0 - 1.12.2Maven
com.microsoft.azure/msal4j 1.14.4-beta - 1.15.1Maven
microsoft/authentication_library < 1.15.1
microsoft/authentication_library < 2.9.2
microsoft/authentication_library < 4.61.3
microsoft/azure_identity_sdk < 1.11.4
microsoft/azure_identity_sdk < 1.12.2
... and 7 more
Published Jun 11, 2024
Tracked Since Feb 18, 2026