CloudSec Wine on Telegram: “🔷 CVE-2021-42306 CredManifest: App Registration…”

TGViewer Telegram Channel Viewer

CloudSec Wine @cloud_sec · 2.27K subscribers

Post #242 668 Nov 22, 2021, 06:27 UTC

🔷 CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory

Another security issue discovered in Azure: due to a misconfiguration, Automation Account "Run as" credentials (PFX certificates) were being stored in cleartext in Azure Active Directory (AAD).

https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/

#azure

NetSPI CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory The vulnerability, found by NetSPI’s cloud pentesting practice director, Karl Fosaaen, affects any organization that uses Automation Account "Run as" accounts in Azure.

Open in Telegram All posts from @cloud_sec

More from @cloud_sec

Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →