GO-2024-2918
Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity
At a glance
- Published
- Updated
- CVE
- CVE-2024-35255
- Aliases
- GHSA-m5vv-6r4h-3vj9, PYSEC-2026-1209
Description
Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/Azure/azure-sdk-for-go/sdk/azidentity | introduced 0, fixed 1.6.0 |
References
- https://github.com/advisories/GHSA-m5vv-6r4h-3vj9 ADVISORY
- https://github.com/Azure/azure-sdk-for-go/commit/50774cd9709905523136fb05e8c85a50e8984499 FIX
- https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/4806#issuecomment-2178960340 WEB
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |