CVE-2024-21424

Summary

CVE-2024-21424 is an elevation of privilege vulnerability affecting Azure Compute Gallery. Attackers can exploit this flaw to gain higher levels of access to affected Azure environments, potentially leading to data theft or unauthorized system modifications. The vulnerability arises from a misconfiguration in the Azure Compute Gallery, allowing unauthenticated users to bypass authentication checks and execute malicious code with elevated privileges. Microsoft has released a patch to address this issue, and users are strongly encouraged to install it as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.