CVE-2020-17002

Azure SDK for C Security Feature Bypass Vulnerability

State
Published
Severity
7.4 High
Published
Dec 9, 2020
Updated
Jun 9, 2026
Reserved
Aug 4, 2020

Read the record on cve.org

Description

Azure SDK for C Security Feature Bypass Vulnerability

Scores

CVSSScoreVectorSource
3.17.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:Cmicrosoft

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
azure-c-shared-utilityMicrosoft
  • before publicationAffected
Azure-c-shared-utility Release LTS_02_2020_Ref02Microsoft
  • before publicationAffected
Azure-c-shared-utility Release LTS_07_2020_Ref02Microsoft
  • before publicationAffected
azure-uamqp-cMicrosoft
  • 1.0.0 to before publicationAffected
azure-uamqp-c Release LTS_02_2020_Ref02Microsoft
  • before publicationAffected
azure-uamqp-c Release LTS_07_2020_Ref02Microsoft
  • before publicationAffected
azure-uhttp-cMicrosoft
  • before publicationAffected
azure-uhttp-c Release LTS_02_2020_Ref02Microsoft
  • before publicationAffected
azure-uhttp-c Release LTS_07_2020_Ref02Microsoft
  • before publicationAffected
azure-umqtt-cMicrosoft
  • before publicationAffected
azure-umqtt-c Release LTS_02_2020_Ref02Microsoft
  • before publicationAffected
azure-umqtt-c Release LTS_07_2020_Ref02Microsoft
  • before publicationAffected
azure-utpm-cMicrosoft
  • before publicationAffected
azure-utpm-c Release LTS_02_2020_Ref02Microsoft
  • before publicationAffected
azure-utpm-c Release LTS_07_2020_Ref02Microsoft
  • before publicationAffected
C SDK for Azure IoTMicrosoft
  • before publicationAffected
C SDK for Azure IoT Release LTS_02_2020_Ref02Microsoft
  • before publicationAffected
C SDK for Azure IoT Release LTS_07_2020_Ref02Microsoft
  • before publicationAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.