CVE-2014-6331

Microsoft Active Directory Federation Services AD FS 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, does not properly process logoff actions, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation, aka "Active...

PT-2014-7162

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Federation Services AD FS versions 2.0 through 3.0 Description The issue arises when a configured SAML Relying Party lacks a sign-out endpoint, leading to improper processing of logoff actions. This makes it easier f...