Title

Microsoft Active Directory Federation Services Denial of Service Vulnerability (MS16-020) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Active Directory Federation Services (ADFS). Active Directory Federation Services (ADFS) is a standards-based service that allows the secure sharing of identity information between trusted business partners (known as a federation) across an extranet. To exploit this vulnerability, the attacker would send certain input data during forms-based authentication to an ADFS server. If successfully exploited, the attacker would cause a denial of service condition.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-65847

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.