Check-AAD-Connect-for-CVE-2021-36949-vulnerability

The script will check if your Azure AD Connect is running a version affected by the vulnerability described in CVE-2021-36949. Affected versions are 1.6.4.0 and 2.0.3.0. Run the script on the server that hosts the AAD Connect installation. The script also checks if the auto-upgrade feature is...

Exploit for Improper Authentication in Microsoft

PoC exploit for CVE-2021-36949, a vulnerability in Azure AD Conn...

CVE-2021-36949

creationtimestamp| type| source ---|---|--- 2021-08-12 22:39:56+00:00| seen| https://t.me/cibsecurity/27251 2021-08-14 21:08:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/302 2021-08-15 13:17:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4071...

CVE-2021-36949

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability...

CVE-2021-36949

CVE-2021-36949 concerns authentication bypass in Microsoft Azure Active Directory Connect. Connected sources specify that the issue arises from deficiencies in the authentication mechanism of both Azure Active Directory Connect and the Azure AD Connect Provisioning Agent (affected versions includ...