CVE-2025-53793CriticalCVSS 7.5
Azure Stack Hub Information Disclosure Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.
🎯 Affected products3
- Azure Stack Hub 2406
- Azure Stack Hub 2408
- Azure Stack Hub 2501
✅ Remediation
KBRelease Notes (Security Update) — fixed build 1.2408.1.50 KBRelease Notes (Security Update) — fixed build 1.2406.1.23 KBRelease Notes (Security Update) — fixed build 1.2501.1.47
🔗 References (10)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53793
- patchhttps://azurestackhub.download.prss.microsoft.com/dbazure/download/MAS_ProdHotfix_1.2408.1.50/HotFix/AzS_Update_1.2408.1.50.zip
- referencehttps://learn.microsoft.com/en-us/azure-stack/operator/hotfix-1-2408-1-50?view=azs-2501
- patchhttps://azurestackhub.download.prss.microsoft.com/dbazure/download/MAS_ProdHotfix_1.2408.1.50/HotFix/metadata.xml
- patchhttps://azurestackhub.download.prss.microsoft.com/dbazure/download/MAS_ProdHotfix_1.2406.1.23/HotFix/AzS_Update_1.2406.1.23.zip
- referencehttps://learn.microsoft.com/en-us/azure-stack/operator/hotfix-1-2406-1-23?view=azs-2406
- patchhttps://azurestackhub.download.prss.microsoft.com/dbazure/download/MAS_ProdHotfix_1.2406.1.23/HotFix/metadata.xml
- patchhttps://azurestackhub.download.prss.microsoft.com/dbazure/download/MAS_ProdHotfix_1.2501.1.47/HotFix/AzS_Update_1.2501.1.47.zip
- referencehttps://learn.microsoft.com/en-us/azure-stack/operator/hotfix-1-2501-1-47?view=azs-2501
- patchhttps://azurestackhub.download.prss.microsoft.com/dbazure/download/MAS_ProdHotfix_1.2501.1.47/HotFix/metadata.xml