SAML Post-Intrusion Attack Mirrors ‘Golden Ticket’

2017-11-24 15:39

A proof-of-concept attack demonstrates how adversaries can abuse Microsoft’s Active Directory Federation Services framework to go unnoticed and assume multiple user identities.

News URL

http://threatpost.com/saml-post-intrusion-attack-mirrors-golden-ticket/128993/

#attack

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.