{"id":"CVE-2024-38195","state":"PUBLISHED","title":"Azure CycleCloud Remote Code Execution Vulnerability","description":"Azure CycleCloud Remote Code Execution Vulnerability","publishedAt":"2024-08-13T17:30:32.378Z","updatedAt":"2025-07-10T16:33:45.281Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Azure CycleCloud 8.2.0","Microsoft Azure CycleCloud 8.0.0","Microsoft Azure CycleCloud 8.6.0","Microsoft Azure CycleCloud 8.0.1","Microsoft Azure CycleCloud 8.0.2","Microsoft Azure CycleCloud 8.1.0","Microsoft Azure CycleCloud 8.1.1","Microsoft Azure CycleCloud 8.2.2","Microsoft Azure CycleCloud 8.2.1","Microsoft Azure CycleCloud 8.3.0","Microsoft Azure CycleCloud 8.4.0","Microsoft Azure CycleCloud 8.4.1","Microsoft Azure CycleCloud 8.4.2","Microsoft Azure CycleCloud 8.5.0","Microsoft Azure CycleCloud"],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38195"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:07:39.287Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/38xxx/CVE-2024-38195.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-38195","state":"PUBLISHED","datePublished":"2024-08-13T17:30:32.378Z","dateUpdated":"2025-07-10T16:33:45.281Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2024-06-11T22:36:08.217Z"},"containers":{"cna":{"title":"Azure CycleCloud Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Azure CycleCloud Remote Code Execution Vulnerability"}],"affected":[{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.0","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.0","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.6.0","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.1","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.0.2","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.0","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.1.1","versions":[{"version":"8.1.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.2","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.2.1","versions":[{"version":"8.2.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.3.0","versions":[{"version":"8.3.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.0","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.1","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.4.2","versions":[{"version":"8.4.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud 8.5.0","versions":[{"version":"8.5.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]},{"vendor":"Microsoft","product":"Azure CycleCloud","versions":[{"version":"8.6.0","status":"affected","lessThan":"8.6.3","versionType":"custom"}],"platforms":["Unknown"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38195","name":"Azure CycleCloud Remote Code Execution Vulnerability","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","description":"CWE-284: Improper Access Control","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2025-07-10T16:33:45.281Z"},"datePublic":"2024-08-13T07:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.3.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.4.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.5.0","versionEndExcluding":"8.6.3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:azure_cyclecloud:*:*:*:*:*:*:*:*","versionStartIncluding":"8.6.0","versionEndExcluding":"8.6.3"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-15T15:01:54.358271Z","id":"CVE-2024-38195","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-15T15:02:06.972Z"}}]}}}