Description (CNA)
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft Corporation / Azure AD Connect | affected Azure AD Connect versions prior to version 1.1.553.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.