Vulnerabilities identified by the Modern 42 Labs security research team. We specialise in enterprise IAM and PAM systems, uncovering vulnerabilities within the tools we implement daily.
CVSS Score: N/A
A self-attested Intune MAM enrolment satisfies the 'require app protection policy' Conditional Access grant, letting the holder of a user's refresh token reach app-protected data without a genuine managed device or app.
Post-authentication access to the Office 365 mail, files and chat an app protection policy was meant to gate.
CVSS Score: ???
A authentication bypass vulnerability in Microsoft Entra ID that allows attackers to bypass multi-factor authentication mechanisms under specific conditions.
MFA bypass to allow access to unauthorized access to protected resources
If you believe you've discovered a security vulnerability in one of our systems or want to collaborate on security research, please reach out to us.
Contact UsWe use cookies and similar technologies to help personalise content, measure the performance of our site, and provide a better experience. By clicking Accept, you consent to the use of all cookies.
Learn more.
