writeups.xyz / Technical Advisory – Azure B2C – Crypto Misuse and Account Compromise

Submitter : c2a

Date: 15 February 2023

Bounty : undisclosed

Vulnerabilities :

• Cryptographic Issues
• JWT
• Account Takeover
• Authentication Bypass

Programs :

• Microsoft (Azure)

Authors :

• John Novak

Link :
https://www.praetorian.com/blog/azure-b2c-crypto-misuse-and-account-compromise/