Vulnerability CVE-2021-42306 CredManifest in Azure Automation and how to fix it

For customers that are using Azure Automation in many cases have been using it to build runbooks to automate against Azure environments (using a built-in AzureRunAsAccount) which is automatically created using the Azure Portal wizard. This creates a service principal in Azure Active Directory and gets by default contributor access to the environment. This configuration, …

Vulnerability CVE-2021-42306 CredManifest in Azure Automation and how to fix it Read More »