Microsoft Azure Stack Improper Authentication Vulnerability Allowing Information Disclosure

A vulnerability exists in Azure Stack due to improper authentication, which allows unauthorized attackers to disclose information over a network. This issue affects several versions of Azure Stack Hub, specifically the 2501, 2406, and 2408 release branches. The vulnerability could lead to the unintentional exposure of system internal configurations.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure, specifically internal system configurations.

Remediation

Users can update their Azure Stack Hub environment to the latest version 1.2501.1.47. Security update packages for versions 1.2406.1.23 and 1.2408.1.50 are also available. Instructions for applying these updates can be found in the release notes for each version.