Security
Headlines
HeadlinesLatestCVEs

Tag

#Azure Site Recovery

CVE-2022-24468: Azure Site Recovery Remote Code Execution Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.

Microsoft Security Response Center
#vulnerability#Azure Site Recovery#Security Vulnerability
CVE-2022-24506: Azure Site Recovery Elevation of Privilege Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server. **What data can be exposed by this vulnerability?** This vulnerability allows disclosure of accounts and user table data, including encrypted credentials.

CVE-2022-24467: Azure Site Recovery Remote Code Execution Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.

CVE-2022-24515: Azure Site Recovery Elevation of Privilege Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server. **What data can be exposed by this vulnerability?** This vulnerability allows disclosure of accounts and user table data, including encrypted credentials.

CVE-2022-24520: Azure Site Recovery Remote Code Execution Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.

CVE-2022-24471: Azure Site Recovery Remote Code Execution Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.

CVE-2022-24519: Azure Site Recovery Elevation of Privilege Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server.

CVE-2022-24518: Azure Site Recovery Elevation of Privilege Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server.

CVE-2022-24470: Azure Site Recovery Remote Code Execution Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.

CVE-2022-24517: Azure Site Recovery Remote Code Execution Vulnerability

**What privileges does an attacker require to exploit this vulnerability?** Exploiting this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.