{"vulnerability": "CVE-2021-4230", "sightings": [{"uuid": "0c06c35c-efdd-49ba-8a41-cb70cf01ef11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://msrc.microsoft.com/blog/2021/11/guidance-for-azure-active-directory-ad-keycredential-property-information-disclosure-in-application-and-service-principal-apis/", "content": "", "creation_timestamp": "2021-11-17T07:00:00.000000Z"}, {"uuid": "3f76b29a-ca46-4f1d-a0bc-d770f942aa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42307", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2021-42307\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C)\n\ud83d\udd39 Description: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability\n\ud83d\udccf Published: 2023-06-30T23:08:37.767Z\n\ud83d\udccf Modified: 2025-04-14T22:46:49.741Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42307", "creation_timestamp": "2025-04-14T22:53:33.000000Z"}, {"uuid": "6f97c8e3-aaaa-4ae7-a340-62ffd1ffbde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/cloud_sec/242", "content": "\ud83d\udd37 CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory\n\nAnother security issue discovered in Azure: due to a misconfiguration, Automation Account \"Run as\" credentials (PFX certificates) were being stored in cleartext in Azure Active Directory (AAD).\n\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/ \n \n#azure", "creation_timestamp": "2021-11-22T06:27:10.000000Z"}, {"uuid": "c7c5d3b9-f741-4fe0-b35f-ba39024726fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42307", "type": "seen", "source": "https://t.me/cibsecurity/65841", "content": "\u203c CVE-2021-42307 \u203c\n\nMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-01T07:15:49.000000Z"}, {"uuid": "e2472ca8-9ccf-4f6c-a4db-a4c22c8ca23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4230", "type": "seen", "source": "https://t.me/cibsecurity/43282", "content": "\u203c CVE-2021-4230 \u203c\n\nA vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. It is recommended to the change the configuration settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-24T20:37:07.000000Z"}, {"uuid": "d372a148-a7c4-4fe0-8eec-94bda7fc97f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42304", "type": "seen", "source": "https://t.me/cibsecurity/32135", "content": "\u203c CVE-2021-42304 \u203c\n\nAzure RTOS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42302, CVE-2021-42303.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-10T07:41:48.000000Z"}, {"uuid": "3fe2ef09-ca95-446c-bbed-e8d48dcef3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42303", "type": "seen", "source": "https://t.me/cibsecurity/32135", "content": "\u203c CVE-2021-42304 \u203c\n\nAzure RTOS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42302, CVE-2021-42303.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-10T07:41:48.000000Z"}, {"uuid": "93127f7c-8857-421b-9cc2-0bbb4ce9a474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42302", "type": "seen", "source": "https://t.me/cibsecurity/32135", "content": "\u203c CVE-2021-42304 \u203c\n\nAzure RTOS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42302, CVE-2021-42303.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-10T07:41:48.000000Z"}, {"uuid": "d781778a-0639-4859-bae8-d0f2380460ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4782", "content": "#Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers", "creation_timestamp": "2021-11-18T13:13:22.000000Z"}, {"uuid": "c4d9b41c-ca4a-4b2f-8fe8-d14e481cc99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/1844", "content": "CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/", "creation_timestamp": "2026-08-03T04:12:55.883100Z"}, {"uuid": "a18006a9-581f-4cf8-8d25-35c82ab1b7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/onelab1337/1978", "content": "#Offensive_security\n1. CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory\n\nApp Registration Certificates Stored in Azure AD\n\n\ud83d\udd17See on NetSpi\n\n2. Windows Security Updates for Hackers\n\n\ud83d\udd17See on Bitsadm", "creation_timestamp": "2026-08-09T04:59:32.511343Z"}, {"uuid": "4fecce61-c9b0-44d8-a4a9-8252d970876f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/reverseame/1844", "content": "CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/", "creation_timestamp": "2026-07-29T12:02:51.297116Z"}, {"uuid": "725ea11e-de28-43e9-824c-3e36ce071191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/cissp/4834", "content": "Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\ud83d\ude0e\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers\n\nMalware_analysis\nStrategic web compromises\n(aka watering hole) in the Middle East\nwith a pinch of Candiru\ud83e\udd74\nhttps://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru\n\nRed_Team_Tactics\n1. TPM sniffing\nhttps://blog.scrt.ch/2021/11/15/tpm-sniffing\n2. Exploit para Apache Struts v2 (RCE)\nhttps://github.com/andre3llo/apachestruts\n\nThreat_Research\nDiving into Open-source LMS Codebases\ud83e\udd14\nhttps://starlabs.sg/blog/2021/11/diving-into-open-source-lms-codebases\n\nsecurity\nAdversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red/Blue Teams\nhttps://github.com/Trusted-AI/adversarial-robustness-toolbox\n// This material is partially based upon work supported by the DARPA under Contract No. HR001120C0013", "creation_timestamp": "2026-09-01T17:00:35.229672Z"}, {"uuid": "bca71008-3d6c-44de-aef0-afb9ae89445a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4834", "content": "Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\ud83d\ude0e\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers\n\nMalware_analysis\nStrategic web compromises\n(aka watering hole) in the Middle East\nwith a pinch of Candiru\ud83e\udd74\nhttps://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru\n\nRed_Team_Tactics\n1. TPM sniffing\nhttps://blog.scrt.ch/2021/11/15/tpm-sniffing\n2. Exploit para Apache Struts v2 (RCE)\nhttps://github.com/andre3llo/apachestruts\n\nThreat_Research\nDiving into Open-source LMS Codebases\ud83e\udd14\nhttps://starlabs.sg/blog/2021/11/diving-into-open-source-lms-codebases\n\nsecurity\nAdversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red/Blue Teams\nhttps://github.com/Trusted-AI/adversarial-robustness-toolbox\n// This material is partially based upon work supported by the DARPA under Contract No. HR001120C0013", "creation_timestamp": "2026-09-10T14:00:05.117835Z"}]}