Non notée
CVE-2019-1126 A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an…
Description
A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Directory.This security update corrects how ADFS handles external authentication requests., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0975.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows Server | 2019 | Pas de correctif indiqué |
| Windows Server | 2016 | Pas de correctif indiqué |
| Windows Server, version 1903 (Server Core installation) | Versions non publiées |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows Server
Les 831 CVE de Windows Server →
CVE-2020-1468
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its…
Non notée
CVE-2020-1463
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka…
Non notée
CVE-2020-1438
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects…
Non notée
CVE-2020-1436
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted…
Non notée