8.8
High
CVE-2025-21380 Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network
Description
Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Marketplace SaaS | Versions not published |
References
- Azure Marketplace SaaS Resources Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified