CVE-2024-38175

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Aug 20, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-381768.1An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a netwo CVE-2024-381777.8Windows App Installer Spoofing Vulnerability CVE-2024-381787.5Scripting Engine Memory Corruption Vulnerability CVE-2024-381798.8Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability CVE-2024-38185.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting CVE-2024-381808.8Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-381829.8Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.CVE-2024-381839.8An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.CVE-2024-381847.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability CVE-2024-381857.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability CVE-2024-381867.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability CVE-2024-381877.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability