CVE-2025-47995
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-07-18
Last updated on: 2025-08-14
Assigner: Microsoft Corporation
Description
Description
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | azure_machine_learning | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-1390 | The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a weakness in the authentication mechanism of Azure Machine Learning. It allows an authorized attacker to elevate their privileges over a network, meaning they can gain higher access rights than intended.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing an attacker who already has some level of access to Azure Machine Learning to increase their privileges. This could lead to unauthorized access to sensitive data or resources, potentially causing data breaches or misuse of the system.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70