{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Azure ist eine Cloud Computing-Plattform von Microsoft.\r\nAzure Cosmos DB ist ein NoSQL-Datenbankdienst von Microsoft.\r\nMicrosoft Entra ID (früher Azure Active Directory) ist ein cloudbasierter Identitäts- und Zugriffsverwaltungsdienst von Microsoft.\r\nDie Azure-Befehlszeilenschnittstelle (Command-Line Interface, CLI) setzt sich aus Befehlen zum Erstellen und Verwalten von Azure-Ressourcen zusammen. Die Azure CLI ist in allen Azure-Diensten verfügbar.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure, Microsoft Azure Cosmos DB, Microsoft Entra und Microsoft Azure CLI ausnutzen, um seine Privilegien zu erhöhen, um falsche Informationen darzustellen, um Informationen offenzulegen und um beliebigen Programmcode auszuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- Sonstiges\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-3460 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3460.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-3460 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3460"
    }, {
      "category" : "external",
      "summary" : "Microsoft Leitfaden für Sicherheitsupdates",
      "url" : "https://msrc.microsoft.com/update-guide/"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-69865",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69865"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-87701",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87701"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-69857",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69857"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-81349",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81349"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-69399",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69399"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-70009",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70009"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-68791",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68791"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-83711",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83711"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-84003",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84003"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-62916",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62916"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-83941",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83941"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-85917",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85917"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-85889",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85889"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-83946",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83946"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-83948",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83948"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-83944",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83944"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-70200",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70200"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-70352",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70352"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-85878",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85878"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-77909",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77909"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-69854",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69854"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-62895",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62895"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-62906",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62906"
    }, {
      "category" : "external",
      "summary" : "Microsoft Security Advisory CVE-2026-62874",
      "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62874"
    } ],
    "source_lang" : "en-US",
    "title" : "Microsoft Azure: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-09-17T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-09-18T12:36:35.566+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-3460",
      "initial_release_date" : "2026-09-17T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-09-17T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version",
          "name" : "Container Registry",
          "product" : {
            "name" : "Microsoft Azure Container Registry",
            "product_id" : "T059816",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:container_registry"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "HDInsight",
          "product" : {
            "name" : "Microsoft Azure HDInsight",
            "product_id" : "T059817",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:hdinsight"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "ARC",
          "product" : {
            "name" : "Microsoft Azure ARC",
            "product_id" : "T059818",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:arc"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Machine Learning",
          "product" : {
            "name" : "Microsoft Azure Machine Learning",
            "product_id" : "T059819",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:machine_learning"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Active Directory B2C",
          "product" : {
            "name" : "Microsoft Azure Active Directory B2C",
            "product_id" : "T059820",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:active_directory_b2c"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "AI Foundry",
          "product" : {
            "name" : "Microsoft Azure AI Foundry",
            "product_id" : "T059821",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:ai_foundry"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Portal",
          "product" : {
            "name" : "Microsoft Azure Portal",
            "product_id" : "T059822",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:portal"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Logic Apps",
          "product" : {
            "name" : "Microsoft Azure Logic Apps",
            "product_id" : "T059823",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:logic_apps"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "AI Language Authoring",
          "product" : {
            "name" : "Microsoft Azure AI Language Authoring",
            "product_id" : "T059824",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:ai_language_authoring"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "HorizonDB",
          "product" : {
            "name" : "Microsoft Azure HorizonDB",
            "product_id" : "T059825",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:horizondb"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "CycleCloud 8.9.2",
          "product" : {
            "name" : "Microsoft Azure CycleCloud 8.9.2",
            "product_id" : "T059826",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:cyclecloud_8.9.2"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Spring Cloud Azure",
          "product" : {
            "name" : "Microsoft Azure Spring Cloud Azure",
            "product_id" : "T059827",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:spring_cloud_azure"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Arc SQL Server Extension",
          "product" : {
            "name" : "Microsoft Azure Arc SQL Server Extension",
            "product_id" : "T059828",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:arc_sql_server_extension"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "Billing",
          "product" : {
            "name" : "Microsoft Azure Billing",
            "product_id" : "T059829",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:azure:billing"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Azure"
      }, {
        "category" : "product_name",
        "name" : "Microsoft Azure CLI",
        "product" : {
          "name" : "Microsoft Azure CLI",
          "product_id" : "T038090",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:microsoft:azure_cli:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "Microsoft Azure Cosmos DB",
        "product" : {
          "name" : "Microsoft Azure Cosmos DB",
          "product_id" : "T057469",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:microsoft:azure_cosmos_db:-"
          }
        }
      }, {
        "branches" : [ {
          "category" : "product_version",
          "name" : "ID",
          "product" : {
            "name" : "Microsoft Entra ID",
            "product_id" : "T058437",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:microsoft:entra:id"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Entra"
      } ],
      "category" : "vendor",
      "name" : "Microsoft"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-62874",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-62874"
  }, {
    "cve" : "CVE-2026-68791",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-68791"
  }, {
    "cve" : "CVE-2026-69399",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-69399"
  }, {
    "cve" : "CVE-2026-69865",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-69865"
  }, {
    "cve" : "CVE-2026-70009",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-70009"
  }, {
    "cve" : "CVE-2026-70200",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-70200"
  }, {
    "cve" : "CVE-2026-83944",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-83944"
  }, {
    "cve" : "CVE-2026-83946",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-83946"
  }, {
    "cve" : "CVE-2026-85878",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-85878"
  }, {
    "cve" : "CVE-2026-85889",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-85889"
  }, {
    "cve" : "CVE-2026-85917",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-85917"
  }, {
    "cve" : "CVE-2026-87701",
    "product_status" : {
      "known_affected" : [ "T058437", "T059823", "T057469", "T059822", "T059825", "T059824", "T059816", "T059827", "T059826", "T059818", "T059829", "T059817", "T059828", "T059821", "T059820", "T059819", "T038090" ]
    },
    "release_date" : "2026-09-17T22:00:00.000+00:00",
    "title" : "CVE-2026-87701"
  } ]
}