What is CVE-2019-0975?

CVE-2019-0975 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. ADFS Security Feature Bypass Vulnerability

Which CVE IDs does CVE-2019-0975 cover?

CVE-2019-0975 covers the following CVE IDs: CVE-2019-0975. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2019-0975?

CVE-2019-0975 has a CVSS v3 base score of 4.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2019-0975?

CVE-2019-0975 affects 6 products, including: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); Windows Server, version 1803 (Server Core Installation); and others — see the full list on the advisory page.

CVE-2019-0975HighCVSS 4.3

ADFS Security Feature Bypass Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

July 9, 2019

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2019-0975 →

📋 Description

A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security update corrects how ADFS updates its list of banned IP addresses.

🎯 Affected products6

Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server, version 1803 (Server Core Installation)
Windows Server, version 1903 (Server Core installation)

✅ Remediation

KB4507435 (Security Update) KB4507469 (Security Update) KB4507460 (Security Update) KB4507453 (Security Update)

🔗 References (9)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0975
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
referencehttps://support.microsoft.com/help/4507435
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
referencehttps://support.microsoft.com/help/4507469
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
referencehttps://support.microsoft.com/help/4507460
patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
referencehttps://support.microsoft.com/help/4507453