CVE-2014-6331: Medium severity microsoft active directory federation services vulnerability
Microsoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, does not properly process logoff actions, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6331?
CVE-2014-6331 is categorized as a medium severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2014-6331?
To fix CVE-2014-6331, ensure a sign-out endpoint is configured for your SAML Relying Parties in Active Directory Federation Services.
Which versions are affected by CVE-2014-6331?
CVE-2014-6331 affects Microsoft Active Directory Federation Services versions 2.0, 2.1, and 3.0.
Can CVE-2014-6331 be exploited remotely?
Yes, CVE-2014-6331 can be exploited by remote attackers leveraging unattended workstations.
Is there a workaround for CVE-2014-6331?
A possible workaround for CVE-2014-6331 is to implement user session handling practices that require logout before allowing access on shared workstations.