ADFS Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests.
This content has been archived
This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk
Summary
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests.
Affected platforms
The following platforms are known to be affected:
Threat details
To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors.
For further information
Remediation steps
| Type | Step |
|---|---|
|
User and administrators are encouraged to review Microsoft's ADFS Security Update and apply the necessary updates. |
CVE Vulnerabilities
Last edited: 17 February 2020 12:35 pm