Microsoft Azure Active Directory Passport 1.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:azure_active_directory_passport:1.3.0:*:*:*:*:*:*:*
part: a version: 1.3.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Azure Active Directory Passport (9a1beb12-f548-5710-bb1c-b983c6cd995c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/azuread/microsoft-authentication-library-for-js |
purl2cpe | 2026-06-01 10:17:06.434135 |
pkg:github/azuread/passport-azure-ad |
purl2cpe | 2026-06-01 10:17:06.434137 |
pkg:npm/passport-azure-ad |
purl2cpe | 2026-06-01 10:17:06.434139 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-7191 |
vulnerable | 2026-06-08 05:08:12.067466 |
Details available
The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authentication via a crafted token.
Published: 2016-09-28T20:00:00.000Z
Updated: 2024-08-06T01:50:47.587Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.