Yonatan Migdal

Name of the Vulnerable Software and Affected Versions Azure Custom Locations Resource Provider (affected versions not specified) Description Server-side request forgery (ssrf) exists in Azure Custom Locations Resource Provider (RP). This allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure DevOps: msazure (affected versions not specified) **Description** Insufficiently protected credentials within Azure DevOps allow an unauthorized attacker to elevate privileges on a network. The issue involves a lack of sufficient protection for credentials, potentially enabling unauthorized access and privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Connected Machine Agent (affected versions not specified) **Description** A stack-based buffer overflow exists in Azure Connected Machine Agent. This allows an authorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.