GitHub Advisoryadvisory · NuGet

GHSA-xc6x-cq47-9chw Vulnerability in Azure Active Directory Authentication Library

HIGH Published 2019-08-16 Modified 2024-05-31 Official page ↗
Aliases
CVE-2019-1258
Ecosystem
NuGet
Packages
microsoft.identitymodel.clients.activedirectory
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reviewed
2019-08-15

Affected packages

• NuGet microsoft.identitymodel.clients.activedirectory: >= 5.0.0, < 5.2.0 → fixed in 5.2.0

Description

An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka 'Azure Active Directory Authentication Library Elevation of Privilege Vulnerability'.

Related

Alias · CVE (1)

  • CVE-2019-1258 An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library… vulnerability

References