Information disclosure vulnerability in Microsoft Active Directory Federation Services

Description

An improper honoring of XML External Entities was found in Microsoft Active Directory Federation Services (ADFS). By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request.

Original advisories

• MS17-019

• CVE-2017-0043

Related products

• Microsoft-Windows-Server-2012
• Microsoft-Windows-Server-2008

CVE list

• CVE-2017-0043
  warning

KB list

• 4012217
• 4012215
• 4012216
• 4013429
• 4012212
• 4012214
• 4012213
• 3217882
• 4010320

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com