writeups.xyz / UnOAuthorized: Privilege Elevation Through Microsoft Applications

Submitter : c2a

Date: 7 August 2024

Bounty : undisclosed

Vulnerabilities :

• Cloud
• Privilege Escalation

Programs :

• Microsoft (Entra ID / Azure AD)

Authors :

• Eric Woodruff (@Ericonidentity)

Link :
https://www.semperis.com/blog/unoauthorized-privilege-elevation-through-microsoft-applications/