PT-2024-9556

CVE-2024-43591

Published

2024-10-08

Updated

2025-07-03

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Azure Command Line Integration (CLI) (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the Azure Command Line Integration (CLI). It is associated with a failure to properly clean up data at the management level. Exploitation of this issue could allow a remote attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Zpbrent

Vendors

Affected products

Weakness enumeration

CWE-77: Improper Neutralization of Special Elements used in a Command (\'Command Injection\')

Related identifiers

CVE-2024-43591

BDU:2024-11263

BIT-AZURE-CLI-2024-43591