Skip to content
Threat Feed
Subscribe

Tag

Federated_identity

2 briefs RSS
high advisory

Entra ID Federated Identity Credential Issuer Modified

Modification of the issuer URL of a federated identity credential in Entra ID can allow an attacker to authenticate as the application's service principal, granting persistent access to Azure resources by pointing to an attacker-controlled identity provider and bypassing normal authentication.

azure entra_id federated_identity persistence privilege_escalation
2r 2t
high advisory

Entra ID Service Principal Federated Issuer Modification

Entra ID (Azure AD) service principal federated issuers can be modified by an attacker to establish persistence within a target environment.

Entra ID azuread persistence federated_identity
2r 1t