Main
Vulnerability Database
Exploits
ID:2678 - Exploit for Spoofing attack in Azure Stack - CVE-2019-1234
ID:2678 - Exploit for Spoofing attack in Azure Stack - CVE-2019-1234
Published: May 18, 2020
Vulnerability identifier: #VU22717
Vulnerability risk: Medium
CVE-ID: CVE-2019-1234
CWE-ID: CWE-451
Exploitation vector: Remote access
Vulnerable software:
Azure Stack
Azure Stack
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to the Azure Stack fails to validate certain requests. A remote attacker can send a specially crafted request to the Azure Stack user portal and perform spoofing attack.
Remediation
Install updates from vendor's website.