{"id":"CVE-2024-38092","state":"PUBLISHED","title":"Azure CycleCloud Elevation of Privilege Vulnerability","description":"Azure CycleCloud Elevation of Privilege Vulnerability","publishedAt":"2024-07-09T17:03:23.658Z","updatedAt":"2025-12-09T23:47:43.690Z","severity":{"score":8.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Azure CycleCloud 7.9.10","Microsoft Azure CycleCloud 8.2.0","Microsoft Azure CycleCloud 8.0.0","Microsoft Azure CycleCloud 8.6.0","Microsoft Azure CycleCloud 7.9.0","Microsoft Azure CycleCloud 7.9.3","Microsoft Azure CycleCloud 7.9.1","Microsoft Azure CycleCloud 7.9.9","Microsoft Azure CycleCloud 7.9.8","Microsoft Azure CycleCloud 7.9.11","Microsoft Azure CycleCloud 8.0.1","Microsoft Azure CycleCloud 7.9.2","Microsoft Azure CycleCloud 7.9.6","Microsoft Azure CycleCloud 7.9.4","Microsoft Azure CycleCloud 7.9.7","Microsoft Azure CycleCloud 8.0.2","Microsoft Azure CycleCloud 8.1.1","Microsoft Azure CycleCloud 8.2.1","Microsoft Azure CycleCloud 8.1.0","Microsoft Azure CycleCloud 8.2.2","Microsoft Azure CycleCloud 8.3.0","Microsoft Azure CycleCloud 8.4.1","Microsoft Azure CycleCloud 8.4.0","Microsoft Azure CycleCloud 8.4.2","Microsoft Azure CycleCloud 8.5.0"],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.10","versions":[{"version":"7.9.10","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.0","versions":[{"version":"7.9.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.3","versions":[{"version":"7.9.3","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.1","versions":[{"version":"7.9.1","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.9","versions":[{"version":"7.9.9","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.8","versions":[{"version":"7.8.9","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.11","versions":[{"version":"7.9.11","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.2","versions":[{"version":"7.9.2","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.6","versions":[{"version":"7.9.6","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.4","versions":[{"version":"7.9.4","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.10","versions":[{"version":"7.9.5","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.7","versions":[{"version":"7.9.7","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092"],"weaknesses":["CWE-693"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/38xxx/CVE-2024-38092.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-38092","state":"PUBLISHED","datePublished":"2024-07-09T17:03:23.658Z","dateUpdated":"2025-12-09T23:47:43.690Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2024-06-11T22:36:08.183Z"},"containers":{"cna":{"title":"Azure CycleCloud Elevation of Privilege Vulnerability","descriptions":[{"lang":"en-US","value":"Azure CycleCloud Elevation of Privilege Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.10","versions":[{"version":"7.9.10","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.0","versions":[{"version":"7.9.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.3","versions":[{"version":"7.9.3","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.1","versions":[{"version":"7.9.1","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.9","versions":[{"version":"7.9.9","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.8","versions":[{"version":"7.8.9","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.11","versions":[{"version":"7.9.11","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.2","versions":[{"version":"7.9.2","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.6","versions":[{"version":"7.9.6","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.4","versions":[{"version":"7.9.4","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.10","versions":[{"version":"7.9.5","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 7.9.7","versions":[{"version":"7.9.7","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.2","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092","name":"Azure CycleCloud Elevation of Privilege Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-693","description":"CWE-693: Protection Mechanism Failure","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-12-09T23:47:43.690Z"},"datePublic":"2024-07-09T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.10","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.3","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.1","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.9","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.8.9","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.11","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.2","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.6","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.4","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.5","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"7.9.7","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.6.2"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-07-09T19:07:36.383317Z","id":"CVE-2024-38092","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-09T19:07:51.586Z"}},{"title":"CVE Program Container","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092","name":"Azure CycleCloud Elevation of Privilege Vulnerability","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T04:04:25.259Z"}}]}}}