{
  "cveId": "CVE-2024-43591",
  "url": "https://patchblox.com/security/cve/CVE-2024-43591",
  "summary": "CVE-2024-43591 is fixed in 2 products on 1 platform, first by SUSE-SU-2025:0751-1, released February 28, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability",
  "description": "This update for azure-cli fixes the following issues:\n\n- CVE-2024-43591: improper neutralization of special elements could allow users to run Azure CLI commands that result\n  in certain service management operations being performed with System level permissions in Azure Defender for Cloud\n  (bsc#1231971).",
  "published": "2024-10-08T12:00:00Z",
  "severity": "Important",
  "cvss": 8.7,
  "cwe": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
  "epss": 0.01632,
  "epssPercentile": 0.76428,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43591",
  "fixes": [
    {
      "platform": "linux",
      "product": "azure-cli",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.58.0-150400.14.12.1",
      "fix": "SUSE-SU-2025:0751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0751-1",
      "released": "2025-02-28T16:26:23Z"
    },
    {
      "platform": "linux",
      "product": "azure-cli",
      "release": "sles 15.6",
      "fixedVersion": "2.58.0-150400.14.12.1",
      "fix": "SUSE-SU-2025:0751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0751-1",
      "released": "2025-02-28T16:26:23Z"
    },
    {
      "platform": "linux",
      "product": "azure-cli-test",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "2.58.0-150400.14.12.1",
      "fix": "SUSE-SU-2025:0751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0751-1",
      "released": "2025-02-28T16:26:23Z"
    },
    {
      "platform": "linux",
      "product": "azure-cli-test",
      "release": "sles 15.6",
      "fixedVersion": "2.58.0-150400.14.12.1",
      "fix": "SUSE-SU-2025:0751-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0751-1",
      "released": "2025-02-28T16:26:23Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}