title: Azure CLI REST Command Information Disclosure Vulnerability
description: Azure CLI REST Command Information Disclosure Vulnerability
problem types: Information Disclosure
affected:
{
vendor: Microsoft
product: Azure App Service
cpes: [cpe:2.3:a:microsoft:azure_staticwebapp_appsettings_set:-:*:*:*:*:*:*:*, cpe:2.3:a:microsoft:azure_staticwebapp_appsettings_delete:-:*:*:*:*:*:*:*, cpe:2.3:a:microsoft:azure_webapp_config_appsettings_delete:-:*:*:*:*:*:*:*, cpe:2.3:a:microsoft:azure_webapp_config_appsettings_set:-:*:*:*:*:*:*:*]
platforms: Unknown
versions:
version: 1.0.0, lessThan: 2.53.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Azure Function App
cpes: [cpe:2.3:a:microsoft:azure_functionapp_config_appsettings_set:-:*:*:*:*:*:*:*, cpe:2.3:a:microsoft:azure_functionapp_config_appsettings_delete:-:*:*:*:*:*:*:*]
platforms: Unknown
versions:
version: 1.0.0, lessThan: 2.53.1, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Azure Logic App
cpes: [cpe:2.3:a:microsoft:azure_logicapp_config_appsettings_delete:-:*:*:*:*:*:*:*, cpe:2.3:a:microsoft:azure_logicapp_config_appsettings_set:-:*:*:*:*:*:*:*]
platforms: Unknown
versions:
version: 1.0.0, lessThan: 2.53.1, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 8.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C
]