CVE-2024-38097
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Oct 8, 2024
Updated: Oct 16, 2024
CWE ID 59
Summary
CVE-2024-38097 is an elevation of privilege vulnerability affecting the Azure Monitor Agent. If successfully exploited, an attacker could gain higher levels of access within the affected system, potentially leading to significant data compromise or unauthorized system modifications. The issue arises due to the agent's misconfiguration in handling certain user input, enabling attackers to escalate their privileges. Microsoft has addressed this vulnerability with a patch and strongly encourages users to apply it as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.