CVE-2019-1234

CVE-2019-1234 describes a spoofing vulnerability in Microsoft Azure Stack, stemming from its failure to validate specific requests. This flaw carries a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity, potentially leading to high integrity impact without user interaction. While no public exploit code or active exploitation is confirmed, its EPSS score suggests a moderate likelihood of future exploitation. Community discussion and media coverage are limited, but the vulnerability was addressed in Microsoft's November 2019 Patch Tuesday.