About this tag
Discussions on WindowsForum.com about federation services focus on security updates for Microsoft Active Directory Federation Services (AD FS). Topics include vulnerabilities that could lead to information disclosure or elevation of privilege, such as specially crafted requests or cross-site scripting attacks. Users share details on important security bulletins like MS17-019, MS15-062, and MS15-040, which address these risks. The tag covers enterprise identity federation, patch management, and securing AD FS deployments against common attack vectors.
  1. News

    MS17-019 - Important: Security Update for Active Directory Federation Services (4010320) -...

    Severity Rating: Important Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves a vulnerability in Active Directory Federation Services (ADFS). The vulnerability could allow information disclosure if an attacker sends a specially crafted request to an...
    • News
    • Thread
    • 4010320 active directory federation services information disclosure march ms17-019 security update vulnerability
    • Replies: 0
    • Forum: Security Alerts
  2. News

    MS15-062 - Important: Vulnerability in Active Directory Federation Services Could Allow...

    Severity Rating: Important Revision Note: V1.0 (June 9, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Active Directory Federation Services (AD FS). The vulnerability could allow elevation of privilege if an attacker submits a specially crafted URL...
    • News
    • Thread
    • 2015 active directory cross-site scripting cybersecurity escalation federation services microsoft ms15-062 script sanitization security update vulnerability
    • Replies: 0
    • Forum: Security Alerts
  3. News

    MS15-040 - Important: Vulnerability in Active Directory Federation Services Could Allow...

    Severity Rating: Important Revision Note: V1.0 (April 14, 2015): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Active Directory Federation Services (AD FS). The vulnerability could allow information disclosure if a user leaves their browser open...
    • News
    • Thread
    • active directory ad fs browser federation services information disclosure microsoft patch security update vulnerability
    • Replies: 0
    • Forum: Security Alerts