writeups.xyz / CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory

Submitter : c2a

Date: 17 November 2021

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure

Programs :

• Microsoft

Authors :

• Karl Fosaaen (@Kfosaaen)

Link :
https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/