~ / search / GHSA-m5vv-6r4h-3vj9

GHSA-m5vv-6r4h-3vj9

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-35255

Packages

EcosystemPackageAffectedFixed in
PyPI azure-identity < 1.16.1 1.16.1
npm @azure/identity < 4.2.1 4.2.1
Maven com.azure:azure-identity < 1.12.2 1.12.2
npm @azure/msal-node >= 2.7.0, < 2.9.2 2.9.2
NuGet Microsoft.Identity.Client >= 4.49.1, < 4.60.4 4.60.4
Go github.com/Azure/azure-sdk-for-go/sdk/azidentity < 1.6.0-beta.4.0.20240610221955-50774cd97099 1.6.0-beta.4.0.20240610221955-50774cd97099
Maven com.microsoft.azure:msal4j >= 1.14.4-beta, < 1.15.1 1.15.1
NuGet Azure.Identity < 1.11.4 1.11.4
NuGet Microsoft.Identity.Client >= 4.61.0, < 4.61.3 4.61.3

Details

As written in the advisory (Markdown source, shown as plain text).

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability.

References

External links from the advisory. They lead to third-party sites.