PT-2024-4309

CVE-2024-35253

Published

2024-06-11

Updated

2026-07-20

Description by

CVSS 3.1

4.4

Medium

MetricsAV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Azure File Sync (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in Microsoft Azure File Sync. It involves incorrect handling of symbolic links before accessing a file, which could allow an attacker to bypass existing security restrictions and elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

3Wyeye5

Chino71

Fangming Gu

Vendors

Affected products

Weakness enumeration

CWE-59: Improper Link Resolution Before File Access (\'Link Following\')

Related identifiers

CVE-2024-35253