CVE-2024-22245 Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin

Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in EAP could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary...

CVE-2024-22245 Arbitrary Authentication Relay Vulnerability in Deprecated EAP Browser Plugin

Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in EAP could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary...

AS-REP Roasting

Active Directory users that have the Kerberos pre-authentication enabled and require access to a resource initiate the Kerberos authentication process by sending an Authentication Server… Continue reading - AS-REP Roasting...

AS-REP Roasting

Active Directory users that have the Kerberos pre-authentication enabled and require access to a resource initiate the Kerberos authentication process by sending an Authentication Server… Continue reading - AS-REP Roasting...

CVE-2024-22245: Improper Authentication

Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in EAP could allow a malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary...

CVE-2024-21381

Microsoft Azure Active Directory B2C Spoofing Vulnerability...

Spoofing

Microsoft Azure Active Directory B2C Spoofing Vulnerability...

CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability

...

CVE-2024-21381 Microsoft Azure Active Directory B2C Spoofing Vulnerability

...

CVE-2024-21381

The connected source (NCSC advisory) confirms CVE-2024-21381 affects Microsoft Azure Active Directory B2C and is categorized as a spoofing vulnerability with the practical impact described as “Pretend to be another user.” The advisory lists it under Azure Active Directory vulnerabilities with a C...

February 13, 2024—KB5034770 (OS Build 20348.2322)

None None...

February 13, 2024—KB5034768 (OS Build 17763.5458) - EXPIRED

None None...

February 13, 2024—KB5034766 (OS Build 22000.2777)

None None...

KLA63957 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service...

PT-2024-1882 · Microsoft · Azure Active Directory B2C

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Active Directory B2C affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Azure Active Directory B2C, which can lead to spoofing...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to perform attacks that could result in the following categories of damage: Remote code execution Administrator/Root rights Remote code execution User rights Spoofing Increased use...

ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure Exploit

Exploit Title: ManageEngine ADManager Plus Build 7183 - Recovery Password Disclosure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/ad-manager/ Details:...

CVE-2024-21381: Cross-Site Request Forgery (CSRF)

Microsoft Azure Active Directory B2C Spoofing Vulnerability...

Microsoft Azure Active Directory Security Vulnerability

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure Active Directory. No information about this vulnerability is available at this time, so stay tuned to CNNVD or...

ManageEngine ADManager Plus Recovery Password Disclosure

Exploit Title: ManageEngine ADManager Plus Build 7183 - Recovery Password Disclosure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/ad-manager/ Details:...