Microsoft Identity Linux Broker RCE Vulnerability (September 2023)

The version of the Microsoft Identity Broker app installed on the remote Windows host is prior to 1.6.1. It is, therefore, affected by a remote code execution vulnerability where an attacker must send the user a malicious file and convince them to open it to exploit this unauthorized arbitrary...

PT-2023-5003 · Microsoft · Identity Linux Broker

Name of the Vulnerable Software and Affected Versions: Microsoft Identity Linux Broker affected versions not specified Description: The issue is related to insufficient input validation, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file...