CVE-2019-1258

Name of the Vulnerable Software and Affected Versions Azure Active Directory Authentication Library (affected versions not specified)

Description The issue is related to insecure privilege management in the Azure Active Directory Authentication Library, specifically in the On-Behalf-Of flow, where the library caches tokens. This allows an authenticated attacker to perform actions in the context of another user by accessing a service configured for On-Behalf-Of flow that assigns incorrect tokens.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.