VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 11, 2014· Updated May 6, 2026

CVE-2014-6331

CVE-2014-6331

Description

Microsoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, does not properly process logoff actions, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation, aka "Active Directory Federation Services Information Disclosure Vulnerability."

Affected products

3
  • Microsoft/Active Directory Federation Services3 versions
    cpe:2.3:a:microsoft:active_directory_federation_services:2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:active_directory_federation_services:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:active_directory_federation_services:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:active_directory_federation_services:3.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.