Microsoft Microsoft.IdentityModel vulnerabilities (CVE)

CVE records published for Microsoft Microsoft.IdentityModel, newest first. Follow to get an email when a new one appears.

1 results

Unscored

CVE-2019-1006 7 years ago

Microsoft Windows; Microsoft Windows Server; Microsoft Microsoft SharePoint Foundation; Microsoft Microsoft .NET Framework 4.5.2

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

6.1%EPSS