Azure Identity Library for .NET Information Disclosure Vulnerability

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2024-29992 · CVE overview and exploitation status

EUVD-2024-1327

GHSA-wvxc-855f-jvrv

cve-program · CVE-2024-29992

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992

euvd · EUVD-2024-1327

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992

nvd · CVE-2024-29992

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992

osv · GHSA-wvxc-855f-jvrv

• https://nvd.nist.gov/vuln/detail/CVE-2024-29992
• https://github.com/Azure/azure-sdk-for-net
• https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/CHANGELOG.md#1110-2024-04-09
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992

• Az PowerShell module 12.0.0 · Tool release · 16 May 2024