writeups.xyz / SyncJacking: Hard Matching Vulnerability Enables Azure AD Account Takeover

Submitter : c2a

Date: 18 November 2022

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Azure AD
• Cloud

Programs :

• Microsoft

Authors :

• Tomer Nahum (@TomerNahum1)

Link :
https://www.semperis.com/blog/syncjacking-azure-ad-account-takeover/