CVE-2019-0975
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses., aka 'ADFS Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-1126.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Windows Server
- Vendor
- Microsoft
- Product
- Windows Server
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2016 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2016 (Core installation) | affected | Unavailable | Unavailable | Unavailable | None listed |
| version 1803 (Core Installation) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019 (Core installation) | affected | Unavailable | Unavailable | Unavailable | None listed |
Windows Server, version 1903 (Server Core installation)
- Vendor
- Microsoft
- Product
- Windows Server, version 1903 (Server Core installation)
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | Unavailable | Unavailable | Unavailable | None listed |