CVE-2017-8613

Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."

Score

CVSS 3.0 8.1 High

Status

Modified - secure@microsoft.com

Published

2017-06-29

Last modified

2024-08-05

Weaknesses

CWE-640

Affected products

• Azure Active Directory Connect (Microsoft)
• Azure Ad Connect (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/99294
• https://technet.microsoft.com/library/security/4033453