CVE-2022-2077

 

Published at: - 14-06-2022 10:15

Last modified: - 03-07-2022 07:15

Total changes: - 4

Description

** DISPUTED ** A vulnerability was found in Microsoft O365 and classified as critical. This issue affects the Conditional Access Policy which leads to improper access controls. By default the policy is not verified for every request. The attack may be initiated remotely. Exploit details have been disclosed to the public. It is recommended to change the configuration settings. NOTE: Vendor claims that pre-requisites are very high, the feature works as intended, and that configuration settings might mitigate the issue.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• N/A-Third Party Advisory
• N/A-Third Party Advisory
• N/A-Exploit, Third Party Advisory
• N/A-Patch, Vendor Advisory

 

Keywords

NVD

 

CVE-2022-2077

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures