CVE-2024-49056: Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.

PriorityP259high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

1.04%

59.7th percentile

Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	airlift.microsoft.com	—	—
msrc	airlift.microsoft.com	—	—

Detection & IOCsextracted from sources · hover to see the quote

·This vulnerability was fully mitigated server-side by Microsoft on airlift.microsoft.com. No customer action is required and no patch is distributed to end users, making client-side detection impossible. ↗
·The vulnerability is a cloud-service-side authentication bypass (assumed-immutable data) on airlift.microsoft.com. No exploit has been publicly disclosed or observed in the wild, and no technical indicators are available in the published sources. ↗
·Exploit status confirmed as not publicly disclosed and not exploited; no IOCs or detection artifacts exist in the published advisories. ↗

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vendor_msrc7.3HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.