External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.
Weakness
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Azure_ad_ssh_login_extension_for_linux | Microsoft | 1.0.0 (including) | 1.0.033370002 (excluding) |