CVE-2023-33170

Описание

ASP.NET and Visual Studio Security Feature Bypass Vulnerability

A vulnerability was found in dotNET applications where account lockout maximum failed attempts may not be immediately updated, allowing an attacker to try more passwords and bypass security restrictions. This flaw allows a remote attacker to bypass security features, causing an impact on confidentiality, integrity, and availability.