Vulnerability · Published Sep 11, 2020 · Assigned by microsoft
CVE-2020-0837ADFS MFA Elevation of Privilege Vulnerability
Medium 5.0
In plain English
A medium-severity security flaw in Windows 10 Version 1607 from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Official description
<p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors.</p> <p>To exploit this vulnerability, an attacker could send a specially crafted authentication request.</p> <p>This security update corrects how ADFS handles multi-factor authentication requests.</p>