#VU65206 Information disclosure in Microsoft products - CVE-2022-30187

Vulnerability identifier: #VU65206

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-30187

CWE-ID: CWE-200

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Azure Storage Queues client library for Python
Azure Storage Queues client library for .NET
Azure Storage Blobs client library for Python
Azure Storage Blobs client library for Java
Azure Storage Blobs client library for .NET

Software vendor:
Microsoft

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application in Azure Storage Library. A local user can gain unauthorized access to sensitive information on the system.

Install updates from vendor's website.

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30187