Microsoft · Active Directory Federation Services · CVE-2020-0837
Name of the Vulnerable Software and Affected Versions:
Active Directory Federation Services (ADFS) (affected versions not specified)
Description:
An elevation of privilege issue exists due to improper handling of multi-factor authentication requests by Active Directory Federation Services (ADFS). This could allow an attacker to bypass some authentication factors by sending a specially crafted authentication request. The issue is related to errors in authentication.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.