azure_portal: Improper Authorization (CVE-2026-62835)

Weakness-Klassen (CWE)

• CWE-285Class

  Improper Authorization

  The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

  cwe.mitre.org →

Re-Analyse & Statuswechsel

Chronologie der NVD-Audit-Events für diese CVE — Reanalyses, CVSS-Updates, CPE-Diffs.

1. Initial Analysis2026-07-29 15:01 UTC· nvd@nist.gov
   • CVSS V3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
   • CPE Configuration: OR *cpe:2.3:a:microsoft:azure_portal:-:*:*:*:*:*:*:*
   • Reference Type: Microsoft Corporation: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62835 Types: Vendor Advisory
2. CVE Modified2026-07-25 02:16 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
   • SSVC: {"id":"CVE-2026-62835","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"yes"},{"technical…
3. New CVE Received2026-07-24 20:18 UTC· secure@microsoft.com
   • Affected: Azure Portal
   • Tag: exclusively-hosted-service
   • Description: Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.
   • CVSS V3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Betroffene Produkte

Aus der Hersteller-/CERT-Meldung extrahierte Produkte und Versionsbereiche. Ein Version-Range wie „<4.14.6“ impliziert die Update-Empfehlung „auf 4.14.6 oder höher aktualisieren“.

• microsoft

  azure_portal

Quellen & Referenzen

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62835
  vendor-advisorypatch

Verknüpfte Empfehlungen

• sans-atrisk-mail2026-07-30 00:00 UTC
  @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29