Product:
Azure Function
Summary
Azure Function has a vulnerability that allows for information disclosure. This issue can lead to unauthorized access to sensitive information. The vulnerability is classified as high severity due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2026-21532 |
Exploitation
To exploit this vulnerability, an attacker can leverage the low attack complexity and network attack vector to gain unauthorized access to sensitive information. Since no privileges are required and user interaction is not necessary, the attack can be executed remotely, making it easier for attackers to exploit the vulnerability.
Affected Products
- Azure Function: A serverless compute service that enables users to run event-driven code without managing infrastructure.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Users should also review their security configurations and access controls to minimize the risk of unauthorized information disclosure.