Microsoft Azure CVE-2019-0816 Security Bypass Vulnerability

Bugtraq ID:	107352
Class:	Design Error
CVE:	CVE-2019-0816
Remote:	Yes
Local:	No
Published:	Mar 12 2019 12:00AM
Updated:	Apr 19 2019 07:00AM
Credit:	Microsoft
Vulnerable:	Ubuntu Ubuntu Linux 18.04 LTS Oracle Linux 7
Not Vulnerable:

Microsoft Azure CVE-2019-0816 Security Bypass Vulnerability

Microsoft Azure is prone to a security bypass vulnerability.

An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks.

Microsoft Azure CVE-2019-0816 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Azure CVE-2019-0816 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Azure CVE-2019-0816 Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2019-0816 | Azure SSH Keypairs Security Feature Bypass Vulnerability (Microsoft)
  
• Oracle Linux Bulletin - April 2019 (Oracle)