HIGH 7.1 Microsoft
CVE-2021-36949
Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
Microsoft Security Update 2021-Aug: Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
Affected Products
- Microsoft Azure Active Directory Connect 1.X.Y.Z
- Azure Active Directory Connect Provisioning Agent
- Microsoft Azure Active Directory Connect 2.0.X.Y
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36949
- https://nvd.nist.gov/vuln/detail/CVE-2021-36949
This high severity vulnerability with a CVSS score of 7.1 was published on 2021-08-10 via Microsoft. Affected: Microsoft Azure Active Directory Connect 1.X.Y.Z, Azure Active Directory Connect Provisioning Agent, Microsoft Azure Active Directory Connect 2.0.X.Y.
vulnfeed aggregates 7759 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.