Entra Connect
Monthly
SQL injection in Microsoft Entra Connect (versions 1.0.0 through below 2.6.84.0) enables local low-privileged users to escalate privileges on the host system, achieving full confidentiality, integrity, and availability impact. The CVSS vector (AV:L/PR:L) confirms that physical or remote shell access with a standard user account is the entry point - no administrative rights required to trigger the flaw. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and high impact make this a credible lateral-movement or persistence risk in hybrid identity environments.
SQL injection in Microsoft Entra Connect (versions 1.0.0 through below 2.6.84.0) enables local low-privileged users to escalate privileges on the host system, achieving full confidentiality, integrity, and availability impact. The CVSS vector (AV:L/PR:L) confirms that physical or remote shell access with a standard user account is the entry point - no administrative rights required to trigger the flaw. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low attack complexity and high impact make this a credible lateral-movement or persistence risk in hybrid identity environments.