CVE-2018-8340

Published: Aug 15, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka "AD FS Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows Server 2012 R2, Windows 10 Servers.

Affected (4)

Products: Microsoft: Windows Server 2012, Windows Server 2016

Microsoft

2 products

Windows Server 2012

Windows Server 2016

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Server 2012	Version r2
Microsoft Windows Server 2016	All versions
Microsoft Windows Server 2016	Version 1709
Microsoft Windows Server 2016	Version 1803