CVE-2019-1258

CVE-2019-1258 concerns the Azure Active Directory Authentication Library (ADAL) On-Behalf-Of flow, where token caching can let an authenticated attacker operate in another user’s context. The vulnerability is described across multiple sources (Microsoft MSRC advisory and related advisories) as an...