Vulnerability: Azure Stack HCI vulnerable to attack

If administrators host virtual machines with Azure Stack HCI, they should install the latest version to prevent attacks.

Anzeige

Close the safety hole

In a warning message, Microsoft writes that the vulnerability (CVE-2024-49060) is classified with a threat level of“highAccording to the authors, no attacks have been reported so far, but they could be imminent. A security update, which is deployed from AzureStack HCI 2411offers a solution.

If attacks are successful, attackers can gain elevated privileges. It is not yet known how this could work in detail. Microsoft states that attackers must already be authenticated for an attack to gain access to a vulnerable Azure Stack HCI cluster. This can be done, for example, via SSH.

(des)