MS14-077: Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (3003381)

medium Nessus Plugin ID 79136

Language:

Synopsis

The remote Windows host is affected by an information disclosure vulnerability.

Description

The remote Windows host is affected by a vulnerability in the Active Directory Federation Services (AD FS) that allows an attacker to obtain unspecified information if a user logs off the application without closing their browser and an attacker immediately reopens the application.

Solution

Microsoft has released a set of patches for Windows Server 2008, 2008 R2, 2012, and 2012 R2.

Plugin Details

Severity: Medium

ID: 79136

File Name: smb_nt_ms14-077.nasl

Version: 1.9

Type: local

Agent: windows

Family: Windows : Microsoft Bulletins

Published: 11/12/2014

Updated: 11/25/2019

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2014-6331

Vulnerability Information

CPE: cpe:/o:microsoft:windows

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 11/11/2014

Vulnerability Publication Date: 11/11/2014

Reference Information

CVE: CVE-2014-6331

BID: 70938

MSFT: MS14-077

MSKB: 3003381

Detections

Analytics