Executive Risk Summary
"The Microsoft.IdentityModel library for .NET has a vulnerability that allows an attacker to make unauthorized HTTP GET requests. This vulnerability can be exploited by leveraging the `SignedHttpRequest` protocol or the `SignedHttpRequestValidator` and has been fixed in Microsoft.IdentityModel.Protocols.SignedHttpRequest version 7.1.2 or higher for 7x and 6.34.0 or higher for 6x."
Operational Audit Arsenal
Target Type DLL
Target Asset Microsoft.IdentityModel.dll
Standard Path %windir%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.IdentityModel
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Microsoft.IdentityModel.dll (DLL)
$Targets = 'Microsoft.IdentityModel.dll'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")
Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue |
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}Patch Impact Forecast
Reboot Required Unlikely
Web applications using federated identity providers may experience temporary disruption during update
Internal Work Notes
Update Microsoft.IdentityModel to version 7.1.2 or higher to mitigate vulnerability CVE-2024-21643, which allows unauthorized HTTP GET requests.
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/6.34.0
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/7.1.2
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/security/advisories/GHSA-rv9j-c866-gp5h
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/wiki/jkucve
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/6.34.0
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/7.1.2
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/security/advisories/GHSA-rv9j-c866-gp5h
Official Advisoryhttps://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/wiki/jkucve
Related Microsoft Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.