Home

CVE-2015-1638

Description

Microsoft Active Directory Federation Services (AD FS) 3.0 on Windows Server 2012 R2 does not properly handle logoff actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation, aka Active Directory Federation Services Information Disclosure Vulnerability.

Risk Information

Base Score
6.5
MODERATE
Vector
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
22.659

Associated Vulnerability

VulnerabilityOS Platform
ms15-040: vulnerability in active directory federation services could allow information disclosure: april 14, 2015 for Windows Server 2012 R2 (KB3045711)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-17474Security Update for Windows Server 2012 R2 (KB3045711)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234