CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory

https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest/

Guidance for Azure Active Directory (AD) keyCredential property Information Disclosure in Application and Service Principal APIs

https://msrc-blog.microsoft.com/2021/11/17/guidance-for-azure-active-directory-ad-keycredential-property-information-disclosure-in-application-and-service-principal-apis/
IHRSA Buyers' Guide - IHRSA Buyers' Guide