CVE-2017-8613

State: Published
Severity: Not scored
Published: Jun 29, 2017
Updated: Aug 5, 2024
Reserved: May 3, 2017

Description

Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Azure AD ConnectMicrosoft Corporation	Azure AD Connect versions prior to version 1.1.553.0Affected

References

99294vdb-entry
https://technet.microsoft.com/library/security/4033453

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.