Lucene search
MSRC TeamMSRC:AC7F436EFDA25468A7957AA82A259178HistoryNov 17, 2021 - 8:02 p.m.
Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs
2021-11-1720:02:19
MSRC Team
msrc-blog.microsoft.com
22
0.003 Low
EPSS
Percentile
68.7%
Microsoft recently mitigated an information disclosure issue, CVE-2021-42306, to prevent private key data from being stored by some Azure services in the keyCredentials property of an Azure Active Directory (Azure AD) Application and/or Service Principal, and prevent reading of private key data previously stored in the keyCredentials property.The keyCredentials property is used to configure an …
Related
cvelist
cvelist
CVE-2021-42306 Azure Active Directory Information Disclosure Vulnerability
2021-11-24 01:05:13
nvd
nvd
CVE-2021-42306
2021-11-24 01:15:08
msrc
msrc
kaspersky
kaspersky
KLA12348 OSI vulnerability in Microsoft Azure
2021-11-17 00:00:00
prion
prion
Information disclosure
2021-11-24 01:15:00
rapid7blog
rapid7blog
[Security Nation] Chris Levendis and Lisa Olson on Cloud CVEs
2022-09-14 19:00:00
cve
cve
CVE-2021-42306
2021-11-24 01:15:08
mscve
mscve
Azure Active Directory Information Disclosure Vulnerability
2021-11-17 08:00:00
cnvd
cnvd
Microsoft Azure Information Disclosure Vulnerability (CNVD-2021-100792)
2021-11-22 00:00:00