CCE-94074-2| Platform: cpe:/o:microsoft:windows_server_2019 | Date: (C)2020-09-22 (M)2023-07-04 |
AD FS Web Agent Authentication Service
The AD FS Web Agent Authentication Service validates incoming authentication requests. Users are either allowed or denied access to web applications based on their security token and the permissions on the application.
Parameter:
[manual/disable/automatic]
Technical Mechanism:
(1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsSystem Services!AD FS Web Agent Authentication Service
(2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesifssvc!Start
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.6 | Attack Vector: NETWORK |
| Exploit Score: 2.8 | Attack Complexity: LOW |
| Impact Score: 4.7 | Privileges Required: LOW |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: LOW |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:57090 |
