Medium severity6.3NVD Advisory· Published Jul 15, 2019· Updated Jun 17, 2026
CVE-2019-0975
CVE-2019-0975
Description
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.
Affected products
7cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
- Range: 2016
- Microsoft/Windows Server, version 1903 (Server Core installation)v5Range: unspecified
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.