← All advisories

High severity7.1NVD Advisory· Published Aug 12, 2021· Updated Aug 10, 2026

CVE-2021-36949

CVE-2021-36949

Description

Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability

Affected products

3

Microsoft/Azure Active Directory Connect2 versions
cpe:2.3:a:microsoft:azure_active_directory_connect:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:azure_active_directory_connect:*:*:*:*:*:*:*:*range: >=1.3.20.0,<=1.6.11.3
- (no CPE)
Microsoft/Azure Active Directory Connect Provisioning Agent
cpe:2.3:a:microsoft:azure_active_directory_connect_provisioning_agent:*:*:*:*:*:*:*:*
Range: <1.1.582.0

Patches

Vulnerability mechanics

References

2

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36949nvdPatchVendor Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36949nvd

News mentions

0

No linked articles in our index yet.