microsoft-patches-critical-entra-id-flaw-enabling-global-admin-impersonation-across-tenants

“`html

A significant token authentication error in Microsoft Entra ID (formerly Azure Active Directory) might have enabled adversaries to mimic any user, encompassing Global Administrators, throughout any tenant.

The weakness, recorded as CVE-2025-55241, has been given the highest CVSS rating of 10.0. Microsoft has characterized it as a privilege elevation issue in Azure Entra. There is no

“`


Leave a Reply

Your email address will not be published. Required fields are marked *

Share This