CVE-2017-8613

Description

Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."

References

https://technet.microsoft.com/library/security/4033453

http://www.securityfocus.com/bid/99294

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3