| Package | Affected versions | Patched versions |
|---|---|---|
| .net framework | = 2.0= 3.0= 3.5= 3.5.1= 4.5.2= 4.6= 4.6.1= 4.6.2= 4.7= 4.7.1= 4.7.2= 4.8 | |
| identitymodel | = 7.0.0 | |
| sharepoint enterprise server | = 2013= 2016 | |
| sharepoint foundation | = 2010= 2013 | |
| sharepoint server | = 2019 |
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free