English
Russian
Japanese
LatAm
Türkiye
Brasil
France
Český
Deutschland
KLA10986
Information disclosure vulnerability in Microsoft Active Directory Federation Services
Updated: 06/03/2020
|
Detect date
?
|
03/14/2017 |
|
Severity
?
|
Warning |
|
Description
|
An improper honoring of XML External Entities was found in Microsoft Active Directory Federation Services (ADFS). By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request. |
|
Affected products
|
Windows Server 2008 |
|
Solution
|
Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel) |
|
Original advisories
|
|
|
Impacts
?
|
OSI [?] |
|
Related products
|
Microsoft Windows Server 2012 Microsoft Windows Server 2008 |
|
CVE-IDS
?
|
|
|
Microsoft official advisories
|
Microsoft Security Update Guide |
|
KB list
|
4012217 |
| Find out the statistics of the vulnerabilities spreading in your region |