CVE-2019-1006

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

• microsoft .net framework 2.0 • microsoft .net framework 3.0 • microsoft .net framework 3.5 • microsoft .net framework 4.7.2 • microsoft .net framework 4.8 • microsoft .net framework 3.5.1 • microsoft .net framework 4.5.2 • microsoft .net framework 4.6 • microsoft .net framework 4.6.1 • microsoft .net framework 4.6.2 • microsoft .net framework 4.7 • microsoft .net framework 4.7.1 • microsoft identitymodel 7.0.0 • microsoft sharepoint enterprise server 2013 • microsoft sharepoint enterprise server 2016 • microsoft sharepoint foundation 2010 • microsoft sharepoint foundation 2013 • microsoft sharepoint server 2019 • microsoft windows 10 • microsoft windows 10 1607 • microsoft windows 10 1703 • microsoft windows 10 1709 • microsoft windows 10 1803 • microsoft windows 10 1809 • microsoft windows 10 1903 • microsoft windows 7 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows server 2016 1803 • microsoft windows server 2016 1903 • microsoft windows server 2019