7.5
CVE-2018-8171
- EPSS 11.5%
- Published 11.07.2018 00:29:00
- Last modified 21.11.2024 04:13:23
- Source secure@microsoft.com
- Teams watchlist Login
- Open Login
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Asp.Net Core Version1.0
Microsoft ≫ Asp.Net Core Version1.1
Microsoft ≫ Asp.Net Core Version2.0
Microsoft ≫ Asp.Net Model View Controller Version5.2
Microsoft ≫ Asp.Net Webpages Version3.2.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 11.5% | 0.933 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.