Privilege Escalation

Azure Identity and Microsoft Authentication are vulnerable to Privilege Escalation. The vulnerability is due to improper handling of tokens and keys within DefaultAzureCredential and ManagedIdentityCredential classes, allowing an attacker to elevate to SYSTEM privileges read arbitrary files on th...

PT-2024-4302 · Microsoft +2 · Authentication Library +3

Name of the Vulnerable Software and Affected Versions: Azure Identity Libraries and Microsoft Authentication Library affected versions not specified Description: The vulnerability in Azure Identity Libraries and Microsoft Authentication Library is related to synchronization errors when using a...