117 matches found
Microsoft Windows ADFS CVE-2019-0975 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows Server 1803 Microsoft Windows Server 1903 Microsoft Windows Server 2016...
KLA11511 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...
Micro Focus Content Manager File Upload Vulnerability
Micro Focus Content Manager is an electronic document and records management system. A file upload vulnerability exists in the Web client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. An attacker could exploit this vulnerability ...
Unrestricted file upload
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
CVE-2019-3489
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
CVE-2019-3489
An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...
CVE-2019-3489
CVE-2019-3489 affects the Web Client component of Micro Focus Content Manager (versions 9.1–9.3) when configured for ADFS authentication. It is an unauthenticated file-upload vulnerability that could allow a remote attacker to upload content to arbitrary locations on the Content Manager server. T...
Microsoft Active Directory Federated Services (ADFS) User Enumeration
Credits: Joshua Platz aka Binary1985 + CVE ID: Requested + Website: https://github.com/binary1985 + Source: https://raw.githubusercontent.com/binary1985/VulnerabilityDisclosure/master/ADFS-Timing-Attack Vendor: ========================== http://www.microsoft.com Product: =========== Active...
CVE-2018-16794
Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...
Stack overflow
Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...
CVE-2018-16794
Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...
CVE-2018-16794
CVE-2018-16794 affects Microsoft ADFS 4.0 and earlier running on Windows Server 2016 and prior. The vulnerability is a server-side request forgery (SSRF) via the txtBoxEmail parameter in /adfs/ls, enabling an attacker to induce the ADFS server to make requests to an arbitrary URL. The linked conn...
CVE-2018-8340
A security feature bypass vulnerability exists when Active Directory Federation Services AD FS improperly handles multi-factor authentication requests, aka "AD FS Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows Server 2012 R2, Windows 10 Servers...
Microsoft Flaw Allows Full Multi-Factor Authentication Bypass
A vulnerability in Microsoft’s Active Directory Federation Services ADFS has been uncovered that would allow malicious actors to bypass multi-factor authentication MFA safeguards. Many organizations rely on ADFS to manage identities and resources across their entire enterprise, and ADFS functions...
ADFS Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Active Directory Federation Services ADFS improperly handles multi-factor authentication requests. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this...
Microsoft Windows ADFS CVE-2018-8340 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security-bypass vulnerability An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows Server 1709 Microsoft Windows Server 1803 Microsoft Windows Server 2012 R...
ADC SAML Error : “Malformed Assertion sent to NetScaler; Please contact your administrator”
End user getting the error message : “Malformed Assertion sent to NetScaler; Please contact your administrator” after authenticating at IDP ADFS v3...
Microsoft Web Customization for ADFS CVE-2018-8326 Cross Site Scripting Vulnerability
Description Microsoft Web Customization for ADFS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...
