1. 23
    MS Teams: 1 feature, 4 vulnerabilities security positive.security
    fcbsd avatar via fcbsd 1 year ago |
    Archive.org Archive.today Ghostarchive
    | 3 comments
    1. 1
      slylax avatar slylax edited 1 year ago | link

      I’m not too familiar with MS Teams typical usage. Are there not public groups like Matrix/IRC/Slack/etc where this could easily be exploited? I guess if Teams is meant only for teams that know each other, some of the WONTFIX makes sense.

      1. 6
        bkhl avatar bkhl 1 year ago | link

        I think there’s plenty of opportunity to exploit this in between:

        • ability to join meetings as a “guest” to an organization.
        • third party bots.
        • the fact you don’t necessarily need to have an account yourself, you just need to get someone in an organization to post a link in a particular way.
      2. 3
        LolPython avatar LolPython 1 year ago | link

        Right, it’s restricted to company internal communication typically connected to Active Directory