CVE-2016-0037

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

CVE-2016-0037

CVE-2016-0037 affects Microsoft Windows Server 2012 R2 with Active Directory Federation Services (ADFS) 3.0 . The issue arises in the forms-based authentication flow, where crafted input can cause a denial of service resulting in a daemon outage and an unresponsive ADFS service. The vulnerability...