SUSE-SU-2025:1019-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2025-24049
Published: 26 Mar 2025, 10:27
Last modified:04 Feb 2026, 03:58

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Mar 2025, 10:27
Published
Vulnerability first disclosed
04 Feb 2026, 03:58
Last Modified
Vulnerability information updated

Description

Security update for azure-cli-core This update for azure-cli-core fixes the following issues: - CVE-2025-24049: Fixed improper neutralization of special elements used in a command allows an unauthorized attacker to elevate privileges locally (bsc#1239460).

Affected Systems

  • opensuse•azure-cli-core&distro=openSUSE Leap 15.6

    < 2.58.0-150400.14.6.1

  • suse•azure-cli-core&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP4

    < 2.58.0-150400.14.6.1

  • suse•azure-cli-core&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP5

    < 2.58.0-150400.14.6.1

  • suse•azure-cli-core&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP6

    < 2.58.0-150400.14.6.1

References (3)