CVE-2023-36868 — Sensitive Information Exposure in Microsoft Azure Service Fabric 9.0 FOR Windows

4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 65.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Azure Service Fabric 9.0 FOR WindowsMicrosoft Azure Service Fabric 9.1 FOR WindowsMicrosoft Azure Service Fabric
Timeline
PublishedJul 11

Description

Azure Service Fabric on Windows Information Disclosure Vulnerability

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5microsoft/azure_service_fabric_9.0_for_windows9.0 — 9.0.1526.9590
▶CVEListV5microsoft/azure_service_fabric_9.1_for_windows9.0 — 9.1.1799.9590

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
CVEList
Azure Service Fabric on Windows Information Disclosure Vulnerability↗2023-07-11
▶
GHSA
GHSA-pp9c-5vxj-47qx: Azure Service Fabric on Windows Information Disclosure Vulnerability↗2023-07-11
▶

📋Vendor Advisories

1
Microsoft
Azure Service Fabric on Windows Information Disclosure Vulnerability↗2023-07-11
▶
CVE-2023-36868 — Sensitive Information Exposure | cvebase