GitHub Advisoryadvisory · NuGet

GHSA-wvxc-855f-jvrv Azure Identity Library for .NET Information Disclosure Vulnerability

MEDIUM Published 2024-04-09 Modified 2024-04-11 Official page ↗

Aliases: CVE-2024-29992
Ecosystem: NuGet
Packages: Azure.Identity
Severity: Moderate
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses: CWE-522
Reviewed: 2024-04-11

Affected packages

• NuGet Azure.Identity: < 1.11.0 → fixed in 1.11.0

Description

Azure Identity Library for .NET Information Disclosure Vulnerability

Related

Alias · CVE (1)

CVE-2024-29992 Azure Identity Library for .NET Information Disclosure Vulnerability vulnerability

Weakness · CWE (1)

CWE-522 Insufficiently Protected Credentials weakness

References