Microsoft Entra tenant with unsecure app consent policy configuration

This issue is rated medium severity because it allows attackers to indirectly gain unwarranted access to users' data via consent phishing, which can lead to unauthorized data exposure and places this issue in the middle of the severity scale.

Attackers might exploit consent phishing by tricking users into granting malicious apps access to sensitive data or other resources, instead of trying to steal user passwords. This allows attackers to gain unauthorized access through unsecured permissions.

Cayosoft Guardian detects this issue by continuously monitoring the state of user consent settings across your Entra ID tenant and flags it as a security issue so administrators are aware that users can grant access without admin consent.

Cayosoft Guardian helps reduce this risk by alerting administrators to configure user consent settings through the Microsoft Entra admin center, ensuring that users can only grant access to apps after explicit admin approval and limiting opportunities for attackers to exploit consent phishing.