medium6.2
CVE-2024-28917
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
Impact
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Azure Arc Extension Microsoft.Azstackhci.Operator | from 1.0.0 before 5.0.5 |
| Microsoft | Azure Arc Extension Microsoft.Azure.Hybridnetwork | from 1.0.0 before 1.0.2620-162 |
| Microsoft | Azure Arc Extension Microsoft.Azurekeyvaultsecretsprovider | from 1.0.0 before 1.5.2 |
| Microsoft | Azure Arc Extension Microsoft.Iotoperations.Mq | before 0.3.0-preview |
| Microsoft | Azure Arc Extension Microsoft.Networkfabricserviceextension | from 1.0.0 before 5.1.3 |
| Microsoft | Azure Arc Extension Microsoft.Openservicemesh | from 1.0.0 before 1.2.6 |
| Microsoft | Azure Arc Extension Microsoft.Videoindexer | from 1.0.0 before 1.1.2 |