CVE-2019-1006

HIGH · CVSS 7.5 EPSS 6.02%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-07-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-1006

Severity

HIGH

CVSS

7.5

EPSS

6.02%

Windows

Original NVD Description

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.