CVE-2023-36419HighCVSS 8.8
Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What privileges could be gained by an attacker who successfully exploited the vulnerability? An attacker who successfully exploited this vulnerability could gain cluster administrator privileges.
What action is required to secure my resources against this vulnerability? A script action has been made available to assist customers with updating their resources as required which can be found here: CVE-2023-36419 Script Action
🎯 Affected products1
- Azure HDInsight
✅ Remediation
KBRelease Notes (Security Update) — fixed build 2308221128