← Back

Identitymodel

identitymodel

Vendor: Microsoft • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-1006
1Microsoft
13.net Framework
IdentitymodelSharepoint Enterprise Server+10 more
Nov 21, 2024
Jul 15, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authen...Show more
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.Show less