SecuritySpace - CVE-2020-0837

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2020-0837

Description:
An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors.

To exploit this vulnerability, an attacker could send a specially crafted authentication request.

This security update corrects how ADFS handles multi-factor authentication requests.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-0837
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837

CVE ID:	CVE-2020-0837
Description:	An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors. To exploit this vulnerability, an attacker could send a specially crafted authentication request. This security update corrects how ADFS handles multi-factor authentication requests.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-0837 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0837