CVE-2019-1258

CVE-2019-1258 is an elevation of privilege vulnerability in the Azure Active Directory Authentication Library's On-Behalf-Of flow, affecting Microsoft Active Directory Authentication Library and NuGet. It allows an authenticated attacker to perform actions as another user by exploiting incorrect token assignment in services configured for On-Behalf-Of flow. The vulnerability has a high CVSS score of 8.8, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage.