H3-2022-0002¶
Azure Multi-Factor Authentication Disabled
| Category | CREDENTIALS |
| Base Score | 9.8 |
Description¶
An Azure account was accessed without any multi-factor authentication enabled.
Impact¶
This misconfiguration permits remote attackers to conduct credential attacks like password spraying to compromise an account and using it to further compromise an organization.