Microsoft Windows Active Directory Federation Services CVE-2019-1126 Security Bypass Vulnerability

Bugtraq ID:	108973
Class:	Design Error
CVE:	CVE-2019-1126
Remote:	Yes
Local:	No
Published:	Jul 09 2019 12:00AM
Updated:	Jul 09 2019 12:00AM
Credit:	Eyal Karni, Marina Simakov and Yaron Zinar from Preempt
Vulnerable:	Microsoft Windows Server 2019 0 Microsoft Windows Server 2016 0 Microsoft Windows Server 2012 R2 0 Microsoft Windows Server 1903 0 Microsoft Windows Server 1803 0
Not Vulnerable:

Microsoft Windows Active Directory Federation Services CVE-2019-1126 Security Bypass Vulnerability

Microsoft Windows is prone to a security-bypass vulnerability.

An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions.

Microsoft Windows Active Directory Federation Services CVE-2019-1126 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Active Directory Federation Services CVE-2019-1126 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Windows Active Directory Federation Services CVE-2019-1126 Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2019-1126 | ADFS Security Feature Bypass Vulnerability (Microsoft)