CVE Catalog

CVE-2023-35348

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.90%

55th percentile - higher than 55% of all known CVEs

Summary

A vulnerability in Active Directory Federation Service allows for security feature bypass, potentially leading to unauthorized access to resources. An attacker could exploit this flaw to gain access to systems that should be protected.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive data and resources, which could lead to serious security breaches. Potential consequences include data loss and damage to reputation.

Recommendation

It is recommended to update systems to the latest version to patch this vulnerability. A security audit should also be conducted to minimize the risk of unauthorized access.

Original NVD description (English source)

Active Directory Federation Service Security Feature Bypass Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS