Azure Active Directory Passport

azure_active_directory_passport

Vendor: Microsoft • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2016-7191

1Microsoft

1Azure Active Directory Passport

May 6, 2026

Sep 28, 2016

N/A· v4

8.1 HIGH· v3

4.3 MEDIUM· v2

The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, which allows remote attackers to bypass authe...Show more