Skip to content
Sign in
5.3 Medium

CVE-2020-16904 An elevation of privilege vulnerability exists in the way Azure Functions validate access keys. An unauthenticated…

Description

<p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTTP Function without proper authorization.</p> <p>This security update addresses the vulnerability by correctly validating access keys used to access HTTP Functions.</p>

Affected products and versions

Product Affected versions Fixed in
Azure Functions Versions not published

Other CVEs of Azure Functions

The 3 CVEs of Azure Functions →
CVE-2026-21532 Azure Function Information Disclosure Vulnerability 8.2 High CVE-2025-33074 Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute… 7.5 High
Track this CVE