Microsoft Windows Server AD FS Information Disclosure Vulnerability

Last Update Date: 14 Aug 2013 15:52 Release Date: 14 Aug 2013 3254 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

An information disclosure vulnerability exists in Active Directory Federation Services (AD FS) that could allow the unintentional disclosure of account information.

Impact

Information Disclosure

System / Technologies affected

Windows Server 2003
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/MS13-066

Vulnerability Identifier

CVE-2013-3185

Source

Microsoft