Not rated
CVE-2019-1126 A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an…
Description
A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Directory.This security update corrects how ADFS handles external authentication requests., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0975.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows Server | 2019 | No fix stated |
| Windows Server | 2016 | No fix stated |
| Windows Server, version 1903 (Server Core installation) | Versions not published |
Other CVEs of Windows Server
The 831 CVEs of Windows Server →
CVE-2020-1463
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka…
Not rated
CVE-2020-1468
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Not rated
CVE-2020-1438
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects…
Not rated
CVE-2020-1436
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted…
Not rated