CVE-2019-1258

CVE-2019-1258 concerns the Azure Active Directory Authentication Library (ADAL) On-Behalf-Of flow, where token caching can let an authenticated attacker operate in another user’s context. The vulnerability is described across multiple sources (Microsoft MSRC advisory and related advisories) as an...

CVE-2019-1258 Azure Active Directory Authentication Library Elevation of Privilege Vulnerability

...

KLA11544 A PE vulnerability in Microsoft Developer Tools

An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1258 Exploitation Related products Microsoft-Azure CVE list CVE-2019-1258 high KB list Solution Install necessary updates...