cbcvebase.

Microsoft Azure Active Directory Passport vulnerabilities

1 known vulnerability affecting microsoft/azure_active_directory_passport.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2016-7191P3HIGHCVSS 8.1v1.0.0v1.1.0+16 more2016-09-28
CVE-2016-7191 [HIGH] CWE-287 CVE-2016-7191: The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2 The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
nvd
Microsoft Azure Active Directory Passport vulnerabilities | cvebase