I uncovered a trivial to execute bypass of Conditional Access via Microsoft Intune - if you are using device filters, you need to read this now!
#Microsoft #Entra #Intune #ConditionalAccess #SecurityFeatureBypass #SecurityVulnerability #MSRC
https://cirriustech.co.uk/blog/outtatune-vulnerability/
G :donor: :Tick:
npub16e…l59dp
2025-04-28 21:37:08 UTC
Author Public Key
npub16ezqaqcxhc8y03e2pwkct7j2l67z06l7xrwlz5lkdu9qfs58zwtqyl59dpSeen on
wss://relay.momostr.pinkPublished at
2025-04-28 21:37:08 UTCEvent JSON
{
"id": "60e14d9086ef34b533453be4e8b206562b9d533a9f7f3a3fa4252cfe2cb220fc",
"pubkey": "d6440e8306be0e47c72a0bad85fa4afebc27ebfe30ddf153f66f0a04c2871396",
"created_at": 1745876228,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@cirriustech/114417744533993732",
"web"
],
[
"t",
"securityvulnerability"
],
[
"t",
"securityfeaturebypass"
],
[
"t",
"msrc"
],
[
"t",
"entra"
],
[
"t",
"conditionalaccess"
],
[
"t",
"intune"
],
[
"t",
"microsoft"
],
[
"proxy",
"https://infosec.exchange/users/cirriustech/statuses/114417744533993732",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/cirriustech/statuses/114417744533993732",
"pink.momostr"
],
[
"-"
]
],
"content": "I uncovered a trivial to execute bypass of Conditional Access via Microsoft Intune - if you are using device filters, you need to read this now!\n\n#Microsoft #Entra #Intune #ConditionalAccess #SecurityFeatureBypass #SecurityVulnerability #MSRC \n\nhttps://cirriustech.co.uk/blog/outtatune-vulnerability/",
"sig": "3ad9fc11c117a90d68f3f2e3a6832af630276ca4b4cd2e52ae86504d42d4e8a791a862ae1ff35232f551d72dce8d733cc96f29a0e3960f09494451b00609b369"
}