Yonatan Migdal

Name of the Vulnerable Software and Affected Versions Azure Custom Locations Resource Provider (affected versions not specified) Description Existe uma falsificação de solicitação do lado do servidor (ssrf) no Azure Custom Locations Resource Provider (RP). Isso permite que um invasor autorizado eleve privilégios em uma rede. Recommendations No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Azure DevOps: msazure (affected versions not specified) **Description** Insufficiently protected credentials within Azure DevOps allow an unauthorized attacker to elevate privileges on a network. The issue involves a lack of sufficient protection for credentials, potentially enabling unauthorized access and privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Connected Machine Agent (affected versions not specified) **Description** A stack-based buffer overflow exists in Azure Connected Machine Agent. This allows an authorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.