KLA10557 Security bypass vulnerability in Active Directory

Improper logoff handling was found in Microsoft Active Directory. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via workstation manipulations.

Original advisories

MS15-040

CVE-2015-1638

Related products

Microsoft-Active-Directory

CVE list

CVE-2015-1638 high

KB list

3045711

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Active Directory Federation Services version 3.0