CVE-2017-8613
Last modified
CVE-2017-8613 is a vulnerability of currently unknown severity. Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability.". EPSS estimates a 3.62% chance of exploitation in the next 30 days.
Description
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Azure Active Directory Connect | <= 1.1.524.0 |
References
- http://www.securityfocus.com/bid/99294Third Party Advisory, VDB Entry
- https://technet.microsoft.com/library/security/4033453Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/99294Third Party Advisory, VDB Entry
- https://technet.microsoft.com/library/security/4033453Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-8613?
How severe is CVE-2017-8613?
How do I fix CVE-2017-8613?
Are you affected by CVE-2017-8613?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST