Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fr7c-jv5v-7q4h

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."

Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."

EPSS

Процентиль: 84%
0.02124
Низкий

8.1 High

CVSS3

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 8.1
nvd
больше 8 лет назад

Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."

EPSS

Процентиль: 84%
0.02124
Низкий

8.1 High

CVSS3

Дефекты

CWE-640