VDB

GCVE-110-CLOUD-2021-0007

GCVE-110-CLOUD-2021-0007
Advisory Published
Vulnetix · Advisory published November 17, 2021
Automation Account 'Run as' credentials (PFX certificates) were being stored in cleartext, in Azure Active Directory (AAD). These credentials were available to anyone with the ability to read information about App Registrations (typically most AAD users).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
AzureActive Directory——
AzureCloud Services——
AzureAzure AD Seamless SSO——

References

Azure AD Seamless SSO logging bypass
advisory
advisory
CredManifest (Azure AD keyCredential property information disclosure)
advisory

Browse GCVE Records

74,352 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›