Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:azure_arc-enabled_kubernetes_cluster_1.7.18:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAzure Arc Enabled Kubernetes Cluster 1.7.18 (5e2b288a-78d9-5025-b9b6-d0d4d82817bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-37968 vulnerable 2026-06-08 05:47:13.590293 Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability
CRITICAL (10)
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.
Published: 2022-10-11T00:00:00.000Z
Updated: 2025-01-02T21:27:04.828Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.