CVE-2024-29990

CVE-2024-29990

• CWE-284 — CWE-284: Improper Access Control

• Microsoft / Azure Kubernetes Service — v=1.0.0 <0.3.4 [affected]

• 3.1 score=9 severity=CRITICAL CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29990 vendor-advisory