CVE-2025-53793

CWE-22 — Path TraversalCWE-287 — Improper Authentication4 documents4 sources
Severity
7.5HIGH
EPSS
0.2%
top 62.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Microsoft Azure Stack HUB 2406Microsoft Azure Stack HUB 2408Microsoft Azure Stack HUB 2501+1 more
Timeline
PublishedAug 12

Description

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDmicrosoft/azure_stack_hub1.2406.0.8 — 1.2406.1.23+2
▶CVEListV5microsoft/azure_stack_hub_24061.0.0 — 1.2406.1.23
▶CVEListV5microsoft/azure_stack_hub_24081.0.0 — 1.2408.1.50
▶CVEListV5microsoft/azure_stack_hub_25011.0.0 — 1.2501.1.47

🔴Vulnerability Details

2
GHSA
GHSA-jgjx-67gm-55wx: Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network↗2025-08-12
▶
CVEList
Azure Stack Hub Information Disclosure Vulnerability↗2025-08-12
▶

📋Vendor Advisories

1
Microsoft
Azure Stack Hub Information Disclosure Vulnerability↗2025-08-12
▶
CVE-2025-53793 (HIGH CVSS 7.5) | Improper authentication in Azure St | cvebase.io