CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Permissions Privileges and Access Controls
Summary: an elevation of privilege vulnerability exists in microsoft azure active directory connect build 1.3.20.0, which allows an attacker to execute two powershell cmdlets in context of a privileged account, and perform privileged actions.to exploit this, an attacker would need to authenticate to the azureâ? ad connect server, aka 'microsoft azure ad connect elevation of privilege vulnerability'.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2019-05-16
Last Modified Date: 2019-10-10