[Issue] CVE-2023-23397 - script doesnt recognize installed AzureAD Module

[mariobesen]

Describe the issue
Windows 11 22621, AzureAD module version 2.0.2.140, latest version of CVE-2023-23397.ps1 script from here:
https://microsoft.github.io/CSS-Exchange/Security/CVE-2023-23397/

We wanted to do audit check on our Exchange Online env and to do that I tried running script using "-CreateAzureApplication" parameter. I get "CVE-2023-23397 script version 23.03.15.2119" and after that following error:

Unable to connect to Azure AD... Make sure you have AzureAD module installed Inner Exception AzureAD module was not found on this computer. You can install it by running Install-Module AzureAD

Expected behavior
Azure app created

Script Output
Unable to connect to Azure AD... Make sure you have AzureAD module installed Inner Exception AzureAD module was not found on this computer. You can install it by running Install-Module AzureAD

Additional context
Tried runniing Connect-AzureAD beforehand and I auth'd successfully and managed to test functionality with Get-AzureADUsers

[lusassl-msft]

@mariobesen what's the output if you run Get-InstalledModule -Name "AzureAD" on the computer where the script should be executed?

[mariobesen]

@mariobesen what's the output if you run Get-InstalledModule -Name "AzureAD" on the computer where the script should be executed?

So, when I do Get-InstalledModule I don't see AzureAD, but when I query Get-Module I can see AzureAD in there.

What is confusing me here is that AzureAD cmdlets are working when I invoke them in terminal, so I'm not sure why is script checking for installed modules instead of available modules?

Furthermore, I just made investment into MS Graph instead of AzureAD that's being deprecated IIRC, so I'm not sure what should be my next step here.

Thank you!

[lusassl-msft]

@mariobesen as per #1567 we also plan to switch using Graph API to do the Azure-related calls. However, now we stick with the AzureAD module.

Get-InstalledModule returns the modules which were installed via PowerShellGet. In this case it sounds like the AzureAD module wasn't installed via 'PowerShellGet'. Can you confirm this?

[mariobesen]

@mariobesen as per #1567 we also plan to switch using Graph API to do the Azure-related calls. However, now we stick with the AzureAD module.

Get-InstalledModule returns the modules which were installed via PowerShellGet. In this case it sounds like the AzureAD module wasn't installed via 'PowerShellGet'. Can you confirm this?

Thank you! Yes, I had to manually install it since we're behind proxy and powershellget is not reachable

[lusassl-msft]

We'll improve the detection logic for the AzureAD module. I've linked the PR to this issue. This should remove the dependency to Get-InstalledModule as we try to import the module and handle the exception which occurs if the module isn't installed.

[odoron]

I'm using the "AzureADPreview" module.
Had to change line 1223 from Import-Module "AzureAD" to Import-Module "AzureADPreview" and now I don't get the Error "The AzureAD module was not found on this computer."
maybe add If not "AzureAD" else "AzureADPreview" before the script fails?

[rawsGit]

My Script still does not recognize AzureAD Module. Add to that, attempts to install AzureAD via PowerShellGet error out. What am I missing?

[lusassl-msft]

@rawsGit the script tries to import the module by simply running Import-Module "AzureAD" -ErrorAction Stop. If it doesn't work, it will fail. What happens if you try to run Import-Module "AzureAD" -ErrorAction Stop in a fresh PowerShell?

[dpaulson45]

My Script still does not recognize AzureAD Module. Add to that, attempts to install AzureAD via PowerShellGet error out. What am I missing?

You are using PowerShell Core, please use normal Windows PowerShell for the script.

[rawsGit]

My Script still does not recognize AzureAD Module. Add to that, attempts to install AzureAD via PowerShellGet error out. What am I missing?

You are using PowerShell Core, please use normal Windows PowerShell for the script.

Same Result:

[dpaulson45]

My Script still does not recognize AzureAD Module. Add to that, attempts to install AzureAD via PowerShellGet error out. What am I missing?

You are using PowerShell Core, please use normal Windows PowerShell for the script.

Same Result:

Because you are using Find-Module not Get-Module so it isn't installed.

Run Install-Module AzureAD as the error message provides.