1170 matches found
CVE-2021-40456
Windows AD FS Security Feature Bypass Vulnerability...
Spoofing
Active Directory Federation Server Spoofing Vulnerability...
CVE-2021-40456
Windows AD FS Security Feature Bypass Vulnerability...
CVE-2021-41361
Active Directory Federation Server Spoofing Vulnerability...
CVE-2021-41361 Active Directory Federation Server Spoofing Vulnerability
...
CVE-2021-41361
Technical details about CVE-2021-41361, including affected products, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor for updates from official advisories.
Active Directory Federation Server Spoofing Vulnerability
...
PT-2021-4750 · Microsoft · Active Directory Federation Services +1
Name of the Vulnerable Software and Affected Versions: Active Directory Federation Server versions affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Active Directory Federation Services AD FS in Microsoft...
PT-2021-4394 · Microsoft · Windows Ad Fs +1
Name of the Vulnerable Software and Affected Versions: Windows AD FS affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the security mechanism. This can affect the system. Recommendations: At the moment, there is ...
Microsoft Active Directory Federation Services 安全特征问题漏洞
Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...
Microsoft Active Directory Federation Services 安全漏洞
Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...
SUSE SLES15 Security Update : rabbitmq-server (SUSE-SU-2021:3325-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3325-1 advisory. - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in management UI bsc1187818. -...
preview.hispanicfederation.org Cross Site Scripting vulnerability OBB-2159040
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SUSE SLES15 Security Update : rabbitmq-server (SUSE-SU-2021:3254-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3254-1 advisory. - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page basic XSS in management UI bsc1187818. -...
SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor
The threat actors behind the notorious SolarWinds supply-chain attacks have dispatched new malware to steal data and maintain persistence on victims’ networks, researchers have found. Researchers from the Microsoft Threat Intelligence Center MSTIC have observed the APT it calls Nobelium using a...
Microsoft Warns of FoggyWeb Malware Targeting Active Directory FS Servers
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads and steal sensitive information from Active Directory Federation Services AD FS servers. The tech giant's Threat Intelligence Center MSTIC...
FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor
Microsoft continues to work with partners and customers to track and expand our knowledge of the threat actor we refer to as NOBELIUM, the actor behind the SUNBURST backdoor, TEARDROP malware, and related components. As we stated before, we suspect that NOBELIUM can draw from significant...
Security Bulletin: One vulnerability in IBM FileNet Content Manager, IBM Content Foundation, IBM FileNet Content Federation Services and IBM FileNet Legacy Content Search Engine (CVE-2014-0114)
Summary A security vulnerability exists in IBM FileNet Content Manager, IBM Content Foundation, IBM FileNet Content Federation Services and IBM FileNet Legacy Content Search Engine. See the individual descriptions for the details. Vulnerability Details CVEID: CVE-2014-0114 CVE-2014-0114...