Summary
Undocumented Azure AD APIs could allow access to internal information of any organization
that uses Azure AD. Collected details included licensing information, mailbox information, and
directory synchronization status.
Affected Services
N/A
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/ramimac
Entry Status
Finalized
Disclosure Date
Tue, Apr 5th, 2022
Exploitablity Period
-
Known ITW Exploitation
No
Detection Methods
-
Piercing Index Rating
-
Discovered by
Secureworks
