N/A

A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Directory.This security update corrects how ADFS handles external authentication requests., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0975.

N/A

N/A

Microsoft Active Directory Federation Services 安全特征问题漏洞

Microsoft Windows Server是美国微软（Microsoft）公司的一套服务器操作系统。Active Directory Federation Services（ADFS）是其中的一个联合身份验证服务。 Microsoft ADFS中存在安全漏洞。攻击者可通过运行特制的应用程序利用该漏洞绕过Extranet锁定策略。以下产品及版本受到影响：Microsoft Windows Server 2012 R2，Windows Server 2016，Windows Server 2019，Wi

N/A

N/A