Site icon VMVirtualMachine.com

Over 50,000 Azure AD Users’ Access Tokens Exposed via Unauthenticated API Endpoint

Over 50,000 Azure AD Users’ Access Tokens Exposed via Unauthenticated API Endpoint

CloudSEK’s BeVigil platform has uncovered a critical security vulnerability affecting an aviation giant, where an exposed JavaScript file containing an unauthenticated API endpoint led to unauthorized access to Microsoft Graph tokens with…

Article Source
https://gbhackers.com/over-50000-azure-ad-users-access-tokens-exposed/

Exit mobile version