ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2017-0159

—
CVSS 3.0
3.7 low
EPSS
4%p89
Published
()
Modified
Description

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."

Vendors
microsoft
Products
windows 10, windows server 2012, windows server 2016
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news

No ingested article mentions this CVE yet.