Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-36949 Details

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36949	CVE	PatchVendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36949	[email protected]

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]

Product	Versions
microsoft azure active directory connect	>= 1.3.20.0, <= 1.6.11.3 >= 2.0.3.0, <= 2.0.9.0
CPE cpe:2.3:a:microsoft:azure_active_directory_connect:::::::: Remediation No remediation found in references.
microsoft azure active directory connect provisioning agent	< 1.1.582.0
CPE cpe:2.3:a:microsoft:azure_active_directory_connect_provisioning_agent:::::::: Remediation No remediation found in references.

6 change records found show changes

QUICK INFO