CVE-2023-21531
10.01.2023, 22:15
Azure Service Fabric Container Elevation of Privilege VulnerabilityEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | azure_service_fabric | 8.2 |
| microsoft | azure_service_fabric | 9.0 |
| microsoft | azure_service_fabric | 9.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.