Microsoft Active Directory Federation Services Information Disclosure

An information disclosure vulnerability exists when Windows Active Directory Federation Services ADFS honors XML External Entities. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system. To exploit this conditio...

KLA10986 Information disclosure vulnerability in Microsoft Active Directory Federation Services

An improper honoring of XML External Entities was found in Microsoft Active Directory Federation Services ADFS. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed request. Original advisories...

MS14-077: Vulnerability in Active Directory Federation Services could allow information disclosure: November 11, 2014

MS14-077: Vulnerability in Active Directory Federation Services could allow information disclosure: November 11, 2014 INTRODUCTION Microsoft has released security bulletin MS14-077. To learn more about this security bulletin: Home users:...

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2

June 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 This update rollup is superseded by July 2016 update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 KB3172614 that was released on July 21, 2016. The June 2016 update rollup for Windows RT 8.1,...

[SECURITY] Fedora 24 Update: ipsilon-2.0.2-2.fc24

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

[SECURITY] Fedora 25 Update: ipsilon-2.0.2-2.fc25

Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation...

The Pirate Bay Founder Ordered to Pay $395,000 Fine in Lawsuit he didn't even know about

One of the founders of notorious file-sharing website The Pirate Bay has been ordered to pay a fine worth nearly US$400,000 to several major record labels after their content was shared illegally via the platform. The penalty has been imposed on The Pirate Bay co-founder Peter Sunde by a court in...

March 8, 2016, update for Office 2016 (KB3114705)

None None...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the authentication mechanism based on forms in the ADFS component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially...

How to Set Up Windows ADFS Server to Test SAML Authentication with NetScaler Gateway

This article describes how to set up Active Directory Federation Services ADFS to integrate with NetScaler, test issues with SAML authentication using ADFS and exposes you to SAML authentication with NetScaler Gateway. Requirements Install Windows 2008 SP1 R2 configured in a domain 2008 R2 with S...

Microsoft Active Directory Federated Authentication Service Denial of Service Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Microsoft Active Directory Federation Services ADFS is an Active Directory Federation Service that runs on Windows systems. The service provides Web Single Sign-On SSO technology, which enables...

CVE-2016-0037

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

CVE-2016-0037

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

Microsoft Active Directory Federation Services Denial of Service Vulnerability (3134222)

This host is missing an important security update according to Microsoft Bulletin MS16-020. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-020: Security update for Active Directory Federation Services to address denial of service: February 9, 2016

None None...

Microsoft Active Directory Federation Services CVE-2016-0037 Denial of Service Vulnerability

Description Microsoft Active Directory Federation Services is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause the server to become non-responsive, resulting in denial of service conditions. Technologies Affected Microsoft Active Directory Federation...

MS16-020: Security Update for Active Directory Federation Services to Address Denial of Service (3134222)

The remote Windows host is missing a security update. It is, therefore, affected by a denial of service vulnerability in Active Directory Federation Services ADFS due to a failure to properly process certain input during forms-based authentication. A remote attacker can exploit this, via crafted...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle Identity Federation Admin Component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation Admin component, which could be exploited by remote attackers to modify data...

Unspecified vulnerability in Oracle Fusion Middleware Oracle Identity Federation protocol support component

Oracle Fusion Middleware is a suite of application servers for cloud and traditional environments. An unspecified security vulnerability exists in the Oracle Fusion Middleware Oracle Identity Federation protocol support component, which could be exploited by remote attackers to modify data...

CVE-2016-0413

Unspecified vulnerability in the Oracle Identity Federation component in Oracle Fusion Middleware 11.1.1.7 allows remote authenticated users to affect integrity via vectors related to Federation protocol support...