ms14-077: vulnerability in active directory federation services could allow information disclosure: november 11, 2014 for Windows Server 2008 x64 Edition (KB3003381)

Risk Information

Base Score
3.5
MODERATE
Vector
AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
33.598%

CVE Information

Source CVE
CVE-2014-6331

Associated CVE
CVE-2014-6331

Patch Details

Patch associated with this vulnerability is supported by ManageEngine.

Patch ID
16525

Patch Description
Security Update for Windows Server 2008 x64 Edition (KB3003381)

References

http://blogs.technet.com/b/srd/archive/2014/11/11/assessing-risk-for-the-november-2014-security-updates.aspx
http://technet.microsoft.com/security/bulletin/MS14-077
http://www.securityfocus.com/bid/70938
http://www.securitytracker.com/id/1031195