writeups.xyz / Entra ID Connect Arbitrary Password Overwrite

Submitter : c2a

Date: 4 January 2024

Bounty : undisclosed

Vulnerabilities :

• Post-Exploitation
• Active Directory
• Azure AD
• Cloud

Programs :

• Microsoft

Authors :

• Anthony Larcher-Gore (@Nullg0re)

Link :
https://nullg0re.com/2024/01/entra-id-connect-arbitrary-password-overwrite/