CVE-2023-36052 is an information disclosure vulnerability in Microsoft Azure Command-Line Interface (CLI) that can lead to the leakage of sensitive information, including credentials. With a CVSS score of 8.6 (HIGH), this vulnerability is remotely exploitable with low attack complexity, potentially resulting in high confidentiality impact without affecting integrity or availability. While not currently listed in CISA's KEV catalog, the vulnerability has garnered significant community discussion and media coverage, indicating a high level of awareness and potential for future exploitation, though no public exploit code is yet available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.53.1CPE matchmatch criteria | cpe:2.3:a:microsoft:azure_command-line_interface:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.