Skip to content
fr Sign in
Not rated

CVE-2019-0975 A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its…

Description

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.

Affected products and versions

Product Affected versions Fixed in
Windows Server 2019 No fix stated
Windows Server 2016 No fix stated
Windows Server, version 1903 (Server Core installation) Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Windows Server

The 831 CVEs of Windows Server →
CVE-2020-1468 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its… Not rated CVE-2020-1463 An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka… Not rated CVE-2020-1438 An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects… Not rated CVE-2020-1437 An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles… Not rated
Track this CVE