CVE-2021-36949high

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 1.4%

exploitation probability

1.4%top 29% of all CVEs

observed exploitation

nono source reports it

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected products

Microsoft · Azure Active Directory Connect Provisioning Agent Microsoft · Microsoft Azure Active Directory Connect 1.X.Y.Z Microsoft · Microsoft Azure Active Directory Connect 2.0.X.Y

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36949 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36949