What is CVE-2019-1234?

CVE-2019-1234 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Azure Stack Spoofing Vulnerability

Which CVE IDs does CVE-2019-1234 cover?

CVE-2019-1234 covers the following CVE IDs: CVE-2019-1234. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2019-1234?

CVE-2019-1234 affects 1 product, including: Azure Stack.

CVE-2019-1234High

Azure Stack Spoofing Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

November 12, 2019

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2019-1234 →

📋 Description

A spoofing vulnerability exists when Azure Stack fails to validate certain requests. An attacker who successfully exploited the vulnerability could make requests to internal Azure Stack resources. An attacker could exploit the vulnerability by sending a specially crafted request to the Azure Stack user portal. The update addresses the vulnerability by changing how Azure Stack handles certain requests.

🎯 Affected products1

Azure Stack

✅ Remediation

KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1234
patchhttps://docs.microsoft.com/en-us/azure-stack/operator/release-notes-security-updates?view=azs-1910