PT-2019-2762

CVE-2019-0962

·

Published

2019-07-09

·

Updated

2020-08-24

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Azure Automation (affected versions not specified)
Description The issue is related to insecure privilege management in Azure Automation on the Windows operating system. It allows a remote attacker to elevate their privileges. The vulnerability exists in "RunAs account" runbooks for users with a contributor role.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾