CVE-2024-38175: Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability
9.6
CVSS
Description
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.
Classification
CVE ID: CVE-2024-38175
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.6
Affected Products
Vendor: Microsoft
Product: Azure Managed Instance for Apache Cassandra
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 41.38% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)