CVE-2021-42306 Azure Active Directory Information Disclosure Vulnerability

🗓️ 24 Nov 2021 01:05:13Reported by microsoftType

Azure Active Directory Info Disclosure CVE-2021-42306

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2021-42306	24 Nov 202101:15	–	attackerkb
BDU FSTEC	The vulnerabilities of the Azure Active Directory (AAD) identity management and protection platform, the Azure Automation service, the Azure Site Recovery disaster recovery tool, and the Azure Migrate data transfer service are related to authentication process flaws, allowing attackers to gain unauthorized access to protected information.	23 Nov 202100:00	–	bdu_fstec
Circl	CVE-2021-42306	17 Nov 202107:00	–	circl
CNNVD	Microsoft Azure Active Directory Connect（ADC）信息泄露漏洞	17 Nov 202100:00	–	cnnvd
CNVD	Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-100792)	22 Nov 202100:00	–	cnvd
CVE	CVE-2021-42306	24 Nov 202101:05	–	cve
Kaspersky	KLA12348 OSI vulnerability in Microsoft Azure	17 Nov 202100:00	–	kaspersky
Microsoft CVE	Azure Active Directory Information Disclosure Vulnerability	17 Nov 202108:00	–	mscve
MSRC	Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs	17 Nov 202108:00	–	msrc
MSRC	Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs	17 Nov 202108:00	–	msrc

[
  {
    "vendor": "Microsoft",
    "product": "Azure Automation",
    "cpes": [
      "cpe:2.3:a:microsoft:azure_automation:-:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Active Directory",
    "cpes": [],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Site Recovery",
    "cpes": [],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Azure Migrate",
    "cpes": [],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-42306

29 May 2024 14:48Current

8.3High risk

Vulners AI Score8.3

CVSS 3.18.1

EPSS0.03082