CVE-2022-38007

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability

State: Published
Severity: 7.8 High
Published: Sep 13, 2022
Updated: Mar 11, 2025
Reserved: Aug 8, 2022

Description

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C	microsoft

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Azure Guest ConfigurationMicrosoft	1.0 to before V1.21Affected
Azure ARCMicrosoft	1.0.0 to before 1.22Affected

References

Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerabilityvendor-advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38007

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.