Azure Monitor Elevation of Privilege Vulnerability

Azure Monitor is a cloud-based monitoring service used to collect and analyze application performance data. This vulnerability allows attackers to elevate their privileges within Azure Monitor, potentially leading to unauthorized access to sensitive data and system configuration.

Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Upgrade to Azure Monitor 2019-06-01 or later from the Azure portal (https://portal.azure.com/).
2. Apply immediate mitigations:
   • Restrict network access to your Azure Monitor instance (firewall it from the public internet)
   • Audit profile activity for suspicious access patterns
   • Monitor for unauthorized profile creation

• msrc.microsoft.com