CVE-2023-38156
published 2023-09-12CVE-2023-38156: Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
PriorityP342high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
1.87%
77.9th percentile
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_hdinsight | >= 1.0 < 2308221128 | 2308221128 |
| msrc | azure_hdinsight | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_msrc7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8jf3-q63c-77rv: Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability
ghsa_unreviewed·2023-09-12
CVE-2023-38156 [HIGH] GHSA-8jf3-q63c-77rv: Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability
Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability
Microsoft
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
vendor_msrc·2023-09-12·CVSS 7.2
CVE-2023-38156 [HIGH] CWE-20 Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
FAQ: How could an attacker exploit this vulnerability?
An authenticated attacker with access to the target HDI cluster could send a specially crafted network request to create and assign themselves as a Cluster Administrator. Cluster Administrators can read/write/delete and perform all resource service management operations.
FAQ: What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain cluster administrator privileges.
Azure HDInsights: Azure HDInsights
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software
No detection rules found.
No public exploits indexed.
2023-09-12
Published