Hackers Abuse Azure AD Abandoned Reply URLs to Escalate Privilege

Recent reports indicate that there has been a privilege escalation vulnerability discovered, which arises due to abandoned Active Directory URLs. Threat actors can use this flaw to gain illegal authorization codes that can be used against Microsoft Power Platform API to gain access tokens and escalate their privileges. Microsoft has patched these vulnerabilities as soon […]

The post Hackers Abuse Azure AD Abandoned Reply URLs to Escalate Privilege appeared first on GBHackers – Latest Cyber Security News | Hacker News.