Vulnerabilitycritical
Critical Vulnerability Found in Microsoft’s AI Healthcare Chatbot
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-38109 | An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network | 8.8 | 2% |
From the original article
3 min read at infosecurity-magazine.com
Severe vulnerabilities have been discovered in Microsoft’s AI healthcare chatbot service, allowing access to user and customer information, according to Tenable researchers. The level of access granted by the vulnerabilities to the Azure Health Bot Service, one of which is rated critical, means it is likely that lateral movement to other resources was possible.
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.