CVE-2017-8613

https://notcve.org/view.php?id=CVE-2017-8613

29 Jun 2017 — Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability." En Azure AD Connect Password, la escritura diferida de contraseñas, si se configura erróneamente durante la habilitación, permite que un atacante restablezca contraseñas y obtenga acceso no autorizado a cuentas de usuario privilegiado AD on-premise. Esto tam... • http://www.securityfocus.com/bid/99294 • CWE-640: Weak Password Recovery Mechanism for Forgotten Password •