PT-2019-2764 · Microsoft · Active Directory Federation Services+1

Mike Crowley · Published 2019-07-09 · Updated 2020-08-24 · CVE-2019-0975

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services (ADFS) (affected versions not specified)

Description A security feature bypass issue exists due to improper updates of banned IP addresses in Active Directory Federation Services (ADFS). To exploit this, an attacker must convince an ADFS administrator to update the banned IP address list. This issue allows attackers to bypass security features, potentially enabling them to affect the system. The vulnerability is related to errors in security settings and can be exploited by a remote attacker to bypass authentication procedures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-254

Related Identifiers

BDU:2019-02701

CVE-2019-0975

Affected Products

Active Directory Federation Services

Windows

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0975 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0975 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-0975 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0975 · Security Note
• https://bdu.fstec.ru/vul/2019-02701 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0975 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2019071015 · Note