Test ID:	1.3.6.1.4.1.25623.1.0.810269
Category:	Windows
Title:	Microsoft Identity Model Extensions Token Signing Verification Advisory (3214296)
Summary:	This host is missing an important security; update according to Microsoft advisory (3214296).
Description:	Summary: This host is missing an important security update according to Microsoft advisory (3214296). Vulnerability Insight: The flaw is due to tokens signed with symmetric keys could be vulnerable to tampering. If a token signed with a symmetric key is used to verify the identity of a user, and the app makes decisions based on the verified identity of that user, then the app could make incorrect decisions. Vulnerability Impact: Successful exploitation will allow attackers to cause elevation of privilege. Affected Software/OS: - Microsoft.IdentityModel.Tokens package version 5.1.0 on Microsoft .NET Core or .NET Framework project Solution: Upgrade to Microsoft.IdentityModel.Tokens version 5.1.1 or later. Please see the references for more info. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.