Microsoft Azure Stack Hub Information Disclosure Vulnerability

A vulnerability in Azure Stack Hub allows an authorized attacker to locally disclose private personal information, such as administrator account passwords, to an unauthorized actor. This issue arises from the exposure of sensitive data in the logs.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of private personal information, including administrator account passwords, in the logs.

Remediation

Users can apply the official security update available through the Microsoft Update Catalog. Instructions for downloading this update are provided in the Azure Stack Hub Release Notes.