← Back

Identitymodel

identitymodel

Vendor: Microsoft • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-1006
1Microsoft
13.net Framework
IdentitymodelSharepoint Enterprise Server+10 more
Jun 17, 2026
Jul 15, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authen...Show more
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.Show less