67 matches found
AZL-42664 CVE-2024-35255 affecting package telegraf for versions less than 1.29.4-6
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
AZL-43323 CVE-2024-35255 affecting package blobfuse2 for versions less than 2.3.2-1
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
...
CVE-2024-35255
CVE-2024-35255 is an elevation-of-privilege vulnerability described as a race-condition issue in Azure Identity Libraries and Microsoft Authentication Library. IBM’s security bulletin for IBM Cloud Pak for AIOps lists CVE-2024-35255 with a base score of 5.5 (CVSS 3.0) and CWE-362, affecting IBM R...
CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
...
CVE-2024-35255
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
traefik -- Azure Identity Libraries Elevation of Privilege Vulnerability
The traefik authors report: There is a vulnerability in Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
CVE-2024-35255: Concurrent Execution using Shared Resource with Improper Synchronization
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability...
PT-2024-4302
Name of the Vulnerable Software and Affected Versions Azure Identity Libraries and Microsoft Authentication Library affected versions not specified Description The vulnerability in Azure Identity Libraries and Microsoft Authentication Library is related to synchronization errors when using a shar...
Microsoft Authentication Library security vulnerabilities
Microsoft Authentication Library MSAL is an authentication library from Microsoft Corporation. A security vulnerability exists in the Microsoft Authentication Library that originates in MSAL.NET applications that are susceptible to a local denial of service in the authentication flow. Affected...
Microsoft Authentication Library security vulnerabilities
Microsoft Authentication Library MSAL is an authentication library from Microsoft Corporation. A security vulnerability exists in Microsoft Authentication Library. An attacker can exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows Server...
Design/Logic Flaw
discourse-microsoft-auth is a plugin that enables authentication via Microsoft. On sites with the discourse-microsoft-auth plugin enabled, an attack can potentially take control of a victim's Discourse account. Sites that have configured their application's account type to any options other than...
CVE-2023-46241
The CVE-2023-46241 entry concerns the discourse-microsoft-auth plugin for Discourse, which allows Microsoft-based authentication and can enable account takeovers when sites are configured to non-single-tenant accounts. The issue is linked to authentication handling within the plugin and has been ...
CVE-2023-46241 Potential account take over due to unverified emails from Microsoft Identity Platform
discourse-microsoft-auth is a plugin that enables authentication via Microsoft. On sites with the discourse-microsoft-auth plugin enabled, an attack can potentially take control of a victim's Discourse account. Sites that have configured their application's account type to any options other than...
PT-2024-13342 · Discourse · Discourse-Microsoft-Auth
Name of the Vulnerable Software and Affected Versions: discourse-microsoft-auth plugin affected versions not specified Description: The discourse-microsoft-auth plugin enables authentication via Microsoft. On sites with this plugin enabled, an attack can potentially take control of a victim's...
Discourse Security Breach
Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. A security vulnerability exists in Discourse discourse-microsoft-auth 9543d188 and prior versions, which can be exploited by an attack to compromise a victim's Discourse...
Microsoft Build brings new innovations and capabilities to keep developers and customers secure
As both organizations and developers adapt to the new reality of working and collaborating in a remote environment, it’s more important than ever to ensure that their experiences are secure and trusted. As part of this week’s Build virtual event, we’re introducing new Identity innovation to help...
