Home / bulletins MS12-083 - Important : Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809) - Version: 1.0
Posted on 11 December 2012
ImportantSeverity Rating: Important
Revision Note: V1.0 (December 11, 2012): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if an attacker presents a revoked certificate to an IP-HTTPS server commonly used in Microsoft DirectAccess deployments. To exploit the vulnerability, an attacker must use a certificate issued from the domain for IP-HTTPS server authentication. Logging on to a system inside the organization would still require system or domain credentials.
