https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:52:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-03036 bdu:2019-03036 https://cve.radiocsirt.org/vuln/bdu:2019-03036 https://cve.radiocsirt.org/vuln/certfr-2019-avi-437 certfr-2019-avi-437 https://cve.radiocsirt.org/vuln/certfr-2019-avi-437 https://cve.radiocsirt.org/vuln/cnvd-2019-42777 cnvd-2019-42777 https://cve.radiocsirt.org/vuln/cnvd-2019-42777 https://cve.radiocsirt.org/vuln/euvd-2026-49015 EUVD-2026-49015 https://cve.radiocsirt.org/vuln/euvd-2026-49015 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1258 <p>An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this vulneraiblity by accessing a service configured for On-Behalf-Of flow that assigns incorrect tokens. This security update addresses the vulnerability by removing fallback cache look-up for On-Behalf-Of scenarios.</p> <p>An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated attacker to perform actions in context of another user. The authenticated attacker can exploit this vulneraiblity by accessing a service configured for On-Behalf-Of flow that assigns incorrect tokens. This security update addresses the vulnerability by removing fallback cache look-up for On-Behalf-Of scenarios.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-1258 https://cve.radiocsirt.org/vuln/ghsa-xc6x-cq47-9chw <p><strong>Affected:</strong> NuGet: microsoft.identitymodel.clients.activedirectory</p> <p>An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka &#39;Azure Active Directory Authentication Library Elevation of Privilege Vulnerability&#39;.</p> <p><strong>Affected:</strong> NuGet: microsoft.identitymodel.clients.activedirectory</p> <p>An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens, aka &#39;Azure Active Directory Authentication Library Elevation of Privilege Vulnerability&#39;.</p> https://cve.radiocsirt.org/vuln/ghsa-xc6x-cq47-9chw https://cve.radiocsirt.org/vuln/gsd-2019-1258 gsd-2019-1258 https://cve.radiocsirt.org/vuln/gsd-2019-1258