CVE-2018-16794

概要

参考情報

• packetstormsecurity.com/files/149376/Microsoft-ADFS-4.0-Windows-Server-2016-Server-Side-Request-Forgery.html · Exploit
• seclists.org/fulldisclosure/2018/Sep/13 · Exploit
• securityfocus.com/bid/105378 · Third Party Advisory
• seclists.org/bugtraq/2018/Sep/26 · Exploit

active directory federation services のその他の脆弱性

• CVE-2015-1757中 4.3Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and…
• CVE-2014-6331中 5.0Microsoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, do…
• CVE-2013-3185中 5.0Microsoft Active Directory Federation Services (AD FS) 1.x through 2.1 on Windows Server 2003 R2 SP2, Windows Server 2008 SP2 and R2 SP1, an…