Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xppj-j5qj-xhcx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.

EPSS

Процентиль: 82%
0.01775
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
nvd
почти 6 лет назад

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.

CVSS3: 4.3
msrc
почти 6 лет назад

ADFS Security Feature Bypass Vulnerability

CVSS3: 4.3
fstec
почти 6 лет назад

Уязвимость службы Active Directory Federation Services (AD FS) операционных систем Windows, позволяющая нарушителю обойти процедуру аутентификации

EPSS

Процентиль: 82%
0.01775
Низкий

6.3 Medium

CVSS3