CVE-2018-8171

EPSS 9.8%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 9.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jul 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Produtos afetados

Microsoft · ASP.NET Microsoft · ASP.NET Core Microsoft · ASP.NET MVC 5.2

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8171 http://www.securityfocus.com/bid/104659 http://www.securitytracker.com/id/1041267