CVE-2023-36419HighCVSS 8.8

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

Published
October 10, 2023
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker who successfully exploited this vulnerability could gain cluster administrator privileges.

What action is required to secure my resources against this vulnerability? A script action has been made available to assist customers with updating their resources as required which can be found here: CVE-2023-36419 Script Action

🎯 Affected products1

  • Azure HDInsight

✅ Remediation

KBRelease Notes (Security Update) — fixed build 2308221128

🔗 References (3)