{"id":"EUVD-2024-1327","enisaUuid":"ae901c5a-ed48-351d-966c-5d8072310150","description":"Azure Identity Library for .NET Information Disclosure Vulnerability","datePublished":"Apr 9, 2024, 5:01:28 PM","dateUpdated":"May 3, 2025, 12:40:29 AM","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992\n","aliases":"CVE-2024-29992\nGHSA-wvxc-855f-jvrv\n","assigner":"microsoft","epss":0.72,"enisaIdProduct":[{"id":"45bbb900-d76a-38a5-a8a4-5dd9b7d1f05c","product":{"name":"Azure Identity Library for .NET","vendor":{"name":"Microsoft"}},"product_version":"1.0.0 \u003c1.11.0"},{"id":"e4ca1151-ff2d-3733-9409-facfd0b75f2f","product":{"name":"Azure Identity Library for .NET","vendor":{"name":"Microsoft"}}}],"enisaIdVendor":[{"id":"50f04a8f-5756-328d-a247-43a43d877aa3","vendor":{"name":"Microsoft"}}],"enisaIdVulnerability":[{"id":"a6cc2973-1174-3dd1-b166-219d77a40a9e","vulnerability":{"id":"GHSA-wvxc-855f-jvrv","description":"Azure Identity Library for .NET Information Disclosure Vulnerability","datePublished":"Apr 9, 2024, 6:30:28 PM","dateUpdated":"Apr 11, 2024, 7:55:27 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2024-29992\nhttps://github.com/Azure/azure-sdk-for-net\nhttps://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md#1110-2024-04-09\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992\n","enisa_id":"EUVD-2024-1327\n","aliases":"GHSA-wvxc-855f-jvrv\nCVE-2024-29992\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:44 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c073a75b-2928-3c10-8c93-9b61f64f8163","vulnerability":{"id":"CVE-2024-29992","description":"Azure Identity Library for .NET Information Disclosure Vulnerability","datePublished":"Apr 9, 2024, 5:01:28 PM","dateUpdated":"May 3, 2025, 12:40:29 AM","status":"PUBLISHED","baseScore":5.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/RL:O/RC:C","references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992\n","enisa_id":"EUVD-2024-1327\n","assigner":"microsoft","epss":0.72,"dataProcessed":"Oct 27, 2026, 7:14:34 AM","vulnerabilityProduct":[{"id":"b1ef19d8-ce5a-4296-b199-8694343cea75","product":{"name":"Azure Identity Library for .NET","vendor":{"name":"Microsoft"}},"product_version":"1.0.0 \u003c1.11.0"},{"id":"dddadf15-b5a4-3289-8b7a-9ff51b19a17e","product":{"name":"Azure Identity Library for .NET","vendor":{"name":"Microsoft"}},"product_version":"1.0.0 \u003c1.11.0"}],"vulnerabilityVendor":[{"id":"00f90011-8d42-3905-b9ad-f24dd42011ab","vendor":{"name":"Microsoft"}}]}}],"enisaIdAdvisory":[{"id":"1364939a-8b13-319b-ae34-3300b7c1a2c9","advisory":{"id":"msrc_CVE-2024-29992","description":"Azure Identity Library for .NET Information Disclosure Vulnerability","datePublished":"Apr 9, 2024, 7:00:00 AM","dateUpdated":"Apr 9, 2024, 7:00:00 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992\nhttps://msrc.microsoft.com/csaf/advisories/2024/msrc_cve-2024-29992.json\n","aliases":"CVE-2024-29992\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"085102b5-f0d3-38c4-9cca-9b94e3b986bd","product":{"name":"Azure Identity Library for .NET 1.11.0","vendor":{"name":"Azure Identity Library for .NET"}}},{"id":"4adbc5fb-0da7-3553-9787-b0dea0fefd30","product":{"name":"Azure Identity Library for .NET","vendor":{"name":"Microsoft"}}},{"id":"bcde9542-906c-3eda-a07d-ba2bc82df369","product":{"name":"1.11.0","vendor":{"name":"Oracle"}}}]}},{"id":"a23b2d88-487e-3dd9-852f-402bf1056c89","advisory":{"id":"WID-SEC-W-2024-0838","description":"Microsoft Azure: Mehrere Schwachstellen","summary":"Ein Angreifer kann diese Schwachstellen in Azure ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Rechte zu erweitern.","datePublished":"Apr 9, 2024, 10:00:00 PM","dateUpdated":"Apr 9, 2024, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0838.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2024-0838\n","aliases":"CVE-2024-20685\nCVE-2024-21424\nCVE-2024-26193\nCVE-2024-28917\nCVE-2024-29063\nCVE-2024-29989\nCVE-2024-29990\nCVE-2024-29992\nCVE-2024-29993\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"180695fc-9def-3686-84b7-f786929ab307","product":{"name":"Arc Cluster microsoft.networkfabricserviceextension Extension","vendor":{"name":"Microsoft"}}},{"id":"2827b4f4-713f-30a6-897d-56a0d2e645c0","product":{"name":"Arc Cluster microsoft.azurekeyvaultsecretsprovider Extension","vendor":{"name":"Microsoft"}}},{"id":"2f6043cf-8ce9-3c10-8ffe-f0c308c9b52c","product":{"name":"Microsoft Azure Arc Cluster microsoft.azure.hybridnetwork Extension","vendor":{"name":"Microsoft"}}},{"id":"4b66a848-a898-3dec-abee-01e042cc1355","product":{"name":"Azure","vendor":{"name":"Microsoft"}}},{"id":"5b6cb57e-5fa7-3759-a44f-1d24943876ca","product":{"name":"Microsoft Azure Arc Cluster microsoft.networkfabricserviceextension Extension","vendor":{"name":"Microsoft"}}},{"id":"6d6c21d4-3de3-3213-95f4-05042d7b230e","product":{"name":"Arc Cluster microsoft.iotoperations.mq Extension","vendor":{"name":"Microsoft"}}},{"id":"784562b1-93f1-3edc-8b49-f1bb5a0801f3","product":{"name":"Arc Cluster microsoft.openservicemesh Extension","vendor":{"name":"Microsoft"}}},{"id":"795bb337-da71-3aed-9db9-5d5249ca6650","product":{"name":"Arc Cluster microsoft.azure.hybridnetwork Extension","vendor":{"name":"Microsoft"}}},{"id":"8e14098b-583f-3a32-a842-5fa6240ab8e9","product":{"name":"Migrate","vendor":{"name":"Microsoft"}}},{"id":"8f74d43c-833d-352c-879e-4cc968e23144","product":{"name":"AI Search","vendor":{"name":"Microsoft"}}},{"id":"93d8968d-0c0f-3d1c-aa26-9c9b94ebc061","product":{"name":"Microsoft Azure Monitor Agent","vendor":{"name":"Microsoft"}}},{"id":"9f53aa9e-9b57-3035-9ad0-0ff263adbfca","product":{"name":"Microsoft Azure Arc Cluster microsoft.azstackhci.operator Extension","vendor":{"name":"Microsoft"}}},{"id":"a38188d8-97d0-35ef-9eb2-a1ed62b9a5b6","product":{"name":"Private 5G Core","vendor":{"name":"Hewlett Packard Enterprise (HPE)"}}},{"id":"ae2c4063-37f6-39e2-bb83-84e12589200c","product":{"name":"Microsoft Azure Arc Cluster microsoft.videoindexer Extension","vendor":{"name":"Microsoft"}}},{"id":"af110d29-bc2e-3873-ad42-f16b83d8e394","product":{"name":"Microsoft Azure Arc Cluster microsoft.openservicemesh Extension","vendor":{"name":"Microsoft"}}},{"id":"af13db79-c1b8-3eb1-bf10-e73069140fce","product":{"name":"CycleCloud 8.6.0","vendor":{"name":"Microsoft"}}},{"id":"b36b3e9a-5f38-3fa0-a1b9-9e0e34b9d146","product":{"name":"Kubernetes Service Confidential Containers","vendor":{"name":"Microsoft"}}},{"id":"b3f7e225-c867-3afe-94c7-687e0b15a8cf","product":{"name":"Microsoft Azure Identity Library for .NET","vendor":{"name":"Microsoft"}}},{"id":"b8021dec-7379-3231-a533-14228fcba285","product":{"name":"Identity Library for .NET","vendor":{"name":"Microsoft"}}},{"id":"bc24be2e-bfbd-35e0-aa2c-48712ec3c19c","product":{"name":"Microsoft Azure Kubernetes Service Confidential Containers","vendor":{"name":"Microsoft"}}},{"id":"c06b2bc8-5ba9-3b44-abb6-384246614e95","product":{"name":"Microsoft Azure Arc Cluster microsoft.azurekeyvaultsecretsprovider Extension","vendor":{"name":"Microsoft"}}},{"id":"c7beac89-6a30-3ccf-b16c-97a8cf5463c5","product":{"name":"Microsoft Azure Arc Cluster microsoft.iotoperations.mq Extension","vendor":{"name":"Microsoft"}}},{"id":"c99822d0-15a6-3664-a58b-84722166c128","product":{"name":"Arc Cluster microsoft.azstackhci.operator Extension","vendor":{"name":"Microsoft"}}},{"id":"ca5db727-ae0c-35e9-a9c8-a99c74f2bd37","product":{"name":"Arc Cluster microsoft.videoindexer Extension","vendor":{"name":"Microsoft"}}},{"id":"cc272487-ee86-358b-97ac-b264a987b500","product":{"name":"Microsoft Azure Private 5G Core","vendor":{"name":"Microsoft"}}},{"id":"cc2eb9e1-888e-372e-80c5-7cd5310c6ddc","product":{"name":"Monitor Agent","vendor":{"name":"Microsoft"}}},{"id":"d8940c40-1c84-3009-8375-2392dadcc1a4","product":{"name":"Microsoft Azure Compute Gallery","vendor":{"name":"Microsoft"}}},{"id":"e0da7fcf-458b-318c-af50-feeaaba6be2c","product":{"name":"Microsoft Azure CycleCloud 8.6.0","vendor":{"name":"Microsoft"}}},{"id":"eadc254d-8271-32c3-81dd-c63f89f62aaa","product":{"name":"Microsoft Azure AI Search","vendor":{"name":"Microsoft"}}},{"id":"fd40a0f4-34e1-3d77-a452-26765c866640","product":{"name":"Microsoft Azure Migrate","vendor":{"name":"Microsoft"}}}]}}]}