Description
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.
Remediation
References
Related Vulnerabilities
Sqlite Divide By Zero Vulnerability (CVE-2019-16168)
MySQL CVE-2016-8284 Vulnerability (CVE-2016-8284)
WordPress Plugin ABC Test 'id' Parameter Cross-Site Scripting (0.1)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3738)
Moodle Improper Authentication Vulnerability (CVE-2021-40693)