70 matches found
RHEL 8 : .NET 8.0 (RHSA-2024:0150)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0150 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...
Denial of service
Microsoft Identity Denial of service vulnerability...
CVE-2024-21319 Microsoft Identity Denial of service vulnerability
...
Duplicate Advisory: Microsoft Identity Denial of service vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-59j7-ghrg-fj52. This link is maintained to preserve external references. Original Description Impact An attacker could exploit this vulnerability by crafting a malicious JSON Web Encryption JWE token with a high...
UBUNTU-CVE-2024-21319
Microsoft Identity Denial of service vulnerability...
Microsoft Identity Services Security Vulnerability
Microsoft Identity Linux Broker is a Linux identity broker from Microsoft Corporation USA. A security vulnerability exists in Microsoft Identity Services. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are affected: .NET 7.0, .NET...
CVE-2024-21319
Microsoft Identity Denial of service vulnerability...
Microsoft Identity Linux Broker RCE Vulnerability (September 2023)
The version of the Microsoft Identity Broker app installed on the remote Windows host is prior to 1.6.1. It is, therefore, affected by a remote code execution vulnerability where an attacker must send the user a malicious file and convince them to open it to exploit this unauthorized arbitrary...
Microsoft Identity Linux Broker Installed (Linux)
Binary data microsoftidentitybrokernixinstalled.nbin...
CVE-2023-36736
Microsoft Identity Linux Broker Remote Code Execution Vulnerability...
CVE-2023-36736
Microsoft Identity Linux Broker Remote Code Execution Vulnerability...
Remote code execution
Microsoft Identity Linux Broker Remote Code Execution Vulnerability...
CVE-2023-36736 Microsoft Identity Linux Broker Remote Code Execution Vulnerability
...
PT-2023-5003 · Microsoft · Identity Linux Broker
Name of the Vulnerable Software and Affected Versions: Microsoft Identity Linux Broker affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file...
Improper Authorization and Origin Validation Error in OneFuzz
Impact Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFuzz instance. To be vulnerable, a OneFuzz deployment must be: Version 2.12.0 or greater Deployed...
TokenTactics - Azure JWT Token Manipulation Toolset
Azure JSON Web Token "JWT" Manipulation Toolset Azure access tokens allow you to authenticate to certain endpoints as a user who signs in with a device code. Even if they used multi-factor authentication. Once you have a user's access token, it may be possible to access certain apps such as...
The state of apps by Microsoft identity: Azure AD app gallery apps that made the most impact in 2020
2020 was an unprecedented year, to say the least. The COVID-19 global pandemic drastically changed how we work, learn, and collaborate. Organizations had to find new ways to connect and maintain productivity while providing secure access to critical apps and resources. Our own Microsoft services,...
Protecting your remote workforce from application-based attacks like consent phishing
The global pandemic has dramatically shifted how people work. As a result, organizations around the world have scaled up cloud services to support collaboration and productivity from home. We’re also seeing more apps leverage Microsoft’s identity platform to ensure seamless access and integrated...
A week in security (July 16 – July 22)
Last week on Labs, we looked at a Magniber expansion, explored open source vulnerabilities, and checked out the boons and drawbacks of smart assistants. We also continued our ad blocking article extravaganza, gave a whistlestop tour of third-party problems, and published our Q2 Cybercrime tactics...