CVE-2017-8613

CVE-2017-8613 describes an Elevation of Privilege vulnerability in Microsoft Azure AD Connect. If misconfigured during enablement, this flaw allows an attacker to reset passwords for arbitrary on-premises Active Directory privileged user accounts, leading to unauthorized access. With a CVSS score of 8.1 (HIGH), this vulnerability is network-exploitable with high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, nor are public exploit codes available, and it has received limited community discussion and media coverage.