CVEs (6)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network. |
Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
Improper access control in Azure Arc allows an unauthorized attacker to elevate privileges over a network. |
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally. |
1Microsoft 2Azure Arc Azure Guest ConfigurationJun 17, 2026 Sep 13, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability |