CVE-2016-7191

HIGH

Microsoft Azure Active Directory Passport 1.x < 1.4.6 and 2.x < 2.0.1 - Authentication Bypass via Token Validation Issue

Title source: llm
STIX 2.1

Description

The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036996
Mitigation, Patch, Vendor Advisory vendor-advisory x_refsource_mskb
https://support.microsoft.com/kb/3187742
Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93213

Scores

CVSS v3 8.1
EPSS 0.2945
EPSS Percentile 97.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-287
Status published
Products (19)
microsoft/azure_active_directory_passport 1.0.0
microsoft/azure_active_directory_passport 1.1.0
microsoft/azure_active_directory_passport 1.1.1
microsoft/azure_active_directory_passport 1.2.0
microsoft/azure_active_directory_passport 1.3.0
microsoft/azure_active_directory_passport 1.3.1
microsoft/azure_active_directory_passport 1.3.2
microsoft/azure_active_directory_passport 1.3.3
microsoft/azure_active_directory_passport 1.3.4
microsoft/azure_active_directory_passport 1.3.5
... and 9 more
Published Sep 28, 2016
Tracked Since Feb 18, 2026