Skip to content
Sign in
8.4 High

CVE-2024-38194 An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges…

Description

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

Affected products and versions

Product Affected versions Fixed in
Azure Web Apps Versions not published

Other CVEs of Azure Web Apps

The 3 CVEs of Azure Web Apps →
CVE-2026-65816 Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over… 10.0 Critical CVE-2026-32211 Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information… 9.1 Critical
Track this CVE