Azure Identity Library for .NET Information Disclosure Vulnerability

GHSA ID

GHSA-wvxc-855f-jvrv

CVE ID

CVE-2024-29992

Severity

medium

Published

2024-04-09T18:30:28Z

Updated

2024-04-11T19:55:28Z

CVSS

5.5 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3

5.5 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

CWEs

• CWE-522 · Insufficiently Protected Credentials

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-29992 ↗
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992 ↗
• https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md#1110-2024-04-09 ↗
• https://github.com/advisories/GHSA-wvxc-855f-jvrv ↗