pentester.land· May 23, 2023· by Secureworks Counter Threat Unit (@Secureworks)

Tampering with Conditional Access Policies Using Azure AD Graph API

Target Program: Microsoft (Azure)

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Cloud#Privilege escalation