CVE-2019-0975

CVE-2019-0975 describes a security feature bypass vulnerability in Active Directory Federation Services (ADFS) affecting Microsoft Windows Server 2016 and 2019. The flaw occurs when ADFS improperly updates its list of banned IP addresses, potentially allowing an attacker to bypass security measures. Rated Medium severity (CVSS 6.3), exploitation requires user interaction, as an attacker must convince an ADFS administrator to update the banned IP list, leading to potential low impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or inclusion in the CISA KEV catalog, though it garnered some community discussion and media coverage at the time of its disclosure.