writeups.xyz / Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD

Submitter : c2a

Date: 15 August 2024

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Privilege Escalation
• Lateral Movement

Programs :

• Microsoft (Entra ID / Azure AD)

Authors :

• Ilan Kalendarov (@IKalendarov)
• Elad Beber

Link :
https://cymulate.com/blog/exploiting-pta-credential-validation-in-azure-ad/