Vulnerabilities > Microsoft > Identitymodel

DATE CVE VULNERABILITY TITLE RISK
2019-07-15 CVE-2019-1006 Improper Certificate Validation vulnerability in Microsoft products
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
network
low complexity
microsoft CWE-295
7.5