CVE-2023-36881 is a spoofing vulnerability affecting Microsoft Azure HDInsight, specifically within its Apache Ambari component. With a CVSS score of 4.5 (MEDIUM), this flaw requires high privileges and user interaction, allowing an attacker to achieve high integrity impact with no confidentiality or availability impact. While not actively exploited (no KEV entry) and lacking public exploit code, it has garnered significant community discussion and media coverage, indicating awareness despite its lower severity and complex attack vector.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:azure_hdinsight:-:*:*:*:*:*:*:* | ||
>= 1.0, < 2307201242CPE match | cpe:2.3:a:microsoft:azure_hdinsight:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.