Описание
ASP.NET Security Feature Bypass Vulnerability
FAQ
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
The attacker would be able to bypass the security checks that prevents an attacker from accessing internal applications in a website.
How could an attacker exploit this vulnerability?
The attacker could send a specially crafted request that would enable them to access parts of a web application that they would not normally have access to.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, 23H2 Edition (Server Core installation) | ||
| Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems | ||
| Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems | ||
| Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems | ||
| Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems | ||
| Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems | ||
| Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems | ||
| Microsoft .NET Framework 4.8 on Windows Server 2016 | ||
| Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) | ||
| Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.8 High
CVSS3
Связанные уязвимости
Уязвимость программной платформы Microsoft .NET Framework, связанная с ошибками в настройках безопасности, позволяющая нарушителю получить доступ к закрытой части веб-приложения
EPSS
8.8 High
CVSS3