CVE-2024-29992: Azure Identity Library for .NET… – CVSS 5.5 · Watchpost

← All vulnerabilities

Azure Identity Library for .NET Information Disclosure Vulnerability

中危 5.5CVE-2024-29992 · GHSA-wvxc-855f-jvrv · Published 09/04/2024 · updated 24/09/2026

要点

CVE-2024-29992 是影响 Azure.Identity, azure identity (microsoft) 的中危 (CVSS 5.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.72%，高于 54.0% 的漏洞。
修复：升级到 1.11.0 或更高版本。

Package	Affected versions	Patched versions
Azure.Identity NuGet	`< 1.11.0`	`1.11.0`
azure identity microsoft	`< 1.11.0`	`1.11.0`

Description

Azure Identity Library for .NET Information Disclosure Vulnerability

NVD description

Azure Identity Library for .NET Information Disclosure Vulnerability

References

nvd.nist.gov/vuln/detail/CVE-2024-29992 · ADVISORY
Azure/azure-sdk-for-net · PACKAGE
Azure/azure-sdk-for-net · WEB
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29992 · WEB

Azure.Identity 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free