title: Network Watcher Agent Virtual Machine Extension for Linux Elevation of Privilege Vulnerability
description: <p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully exploited this vulnerability could execute code with elevated privileges.</p>
<p>To exploit this vulnerability, an attacker would have to be present as a user on the affected virtual machine.</p>
<p>The security update addresses this vulnerability by correcting how Network Watcher Agent virtual machine extension for Linux executes with elevated privileges.</p>
problem types: Elevation of Privilege
affected:
{
vendor: Microsoft
product: Network Watcher Agent virtual machine extension for Linux
cpes: cpe:2.3:a:microsoft:network_watcher_agent:-:*:*:*:*:linux:*:*
platforms: Unknown
versions:
version: 0, lessThan: publication, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
]