Medium severity6.2NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026
CVE-2024-28917
CVE-2024-28917
Description
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
Affected products
9- Range: 1.0.0
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.azstackhci.operator:*:*:*:*:*:*:*:*Range: >=1.0.0,<5.0.5
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.azure.hybridnetwork:*:*:*:*:*:*:*:*Range: >=1.0.0,<1.0.2620-162
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.azurekeyvaultsecretsprovider:*:*:*:*:*:*:*:*Range: >=1.0.0,<1.5.2
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.iotoperations.mq:*:*:*:*:*:*:*:*Range: <0.3.0-preview
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.networkfabricserviceextension:*:*:*:*:*:*:*:*Range: >=1.0.0,<5.1.3
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.openservicemesh:*:*:*:*:*:*:*:*Range: >=1.0.0,<1.2.6
- cpe:2.3:a:microsoft:azure_arc_extension_microsoft.videoindexer:*:*:*:*:*:*:*:*Range: >=1.0.0,<1.1.2
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28917nvdVendor Advisory
News mentions
0No linked articles in our index yet.