This vulnerability allows local malicious users to disclose sensitive information on Microsoft Azure. An attacker must first obtain the ability to execute high-privileged code within a container on the target system in order to exploit this vulnerability. The specific flaw exists within the WAagent daemon. The issue results from insufficient verification of the origin of requests. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft azure service fabric 9.1 |
||
microsoft azure service fabric 8.2 |
||
microsoft azure service fabric 9.0 |
Vulmon