CVE-2021-33779

Windows AD FS Security Feature Bypass Vulnerability...

CVE-2021-33779

CVE-2021-33779 is a Windows AD FS security feature bypass vulnerability where Primary Refresh Tokens (PRTs) are not strongly encrypted, enabling token reuse/replay scenarios. Microsoft’s advisories tied the issue to updates in KB5004237 and related security updates for Windows 10/Server releases;...

July 13, 2021—KB5004244 (OS Build 17763.2061)

None None...

KB5004237: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 Security Update (July 2021)

The remote Windows host is missing security update 5004237. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...