CVE

Id
39943  
CVE No.
CVE-2009-2508  
Status
Candidate  
Description
The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove credentials at the end of a network session, which allows physically proximate attackers to obtain the credentials of a previous user of the same web browser by using data from the browser"s cache, aka "Single Sign On Spoofing in ADFS Vulnerability."  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438999 39943 CVE-2009-2508 MS:MS09-070  View
439000 39943 CVE-2009-2508 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-070.mspx  View
439001 39943 CVE-2009-2508 CERT:TA09-342A  View
439002 39943 CVE-2009-2508 URL:http://www.us-cert.gov/cas/techalerts/TA09-342A.html  View
439003 39943 CVE-2009-2508 OVAL:oval:org.mitre.oval:def:5882  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41370 JVNDB-2009-002377 Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 Microsoft Windows の Web Services on Devices API (WSDAPI) には、WSD メッセージのヘッダの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2512 39943 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002377.html  View