writeups.xyz / Microsoft Remote Desktop Web Access Authentication Timing Attack

Submitter : c2a

Date: 4 February 2021

Bounty : undisclosed

Vulnerabilities :

• Timing Attack
• Broken Authentication

Programs :

• Microsoft

Authors :

• Matt Dunn

Link :
https://raxis.com/blog/rd-web-access-vulnerability