CVE-2023-36052

—

CVSS 3.1

8.6 high

EPSS

21%p97

Published

Nov 14, 2023 (Nov 14, 2023)

Modified

Jun 17, 2026

Description

Azure CLI REST Command Information Disclosure Vulnerability

Vendors: microsoft
Products: azure command-line interface
Weakness: CWE-359
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (21.1%)

In the news3 stories

LeakyCLI Flaw Exposes AWS and Google Cloud Credentials

Infosecurity MagazineApr 16, 14:15 UTC · Apr 16, 2024Vulnerability CVE-2023-36052

60

Alert: Microsoft Releases Patch Updates for 5 New Zero

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025 CVE-2023-36033 CVE-2023-36036+9 CVEs

60

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2024Vulnerability CVE-2023-360521

35