ID:6624 - Exploit for Improper Authentication in Azure Active Directory Connect - CVE-2021-36949

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error in when processing authentication requests in the Microsoft Azure Active Directory Connect. A remote authenticated attacker on the local network can perform a man-in-the-middle (MitM) attack and gain unauthorized access to the application.

Remediation