Security Advisory 971492 provides official guidance about the new IIS authentication bypass vulnerability. We’d like to go into more detail in this blog to help you understand:
Am I at risk? If so, what could happen? How can I protect myself? Which IIS configurations are at risk?
Only a specific IIS configuration is at risk from this vulnerability.