Not rated

CVE-2017-11879 ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a…

Description

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

Affected products and versions

Product	Affected versions	Fixed in
ASP.NET Core	Versions not published

References

portal.msrc.microsoft.com portal.msrc.microsoft.com
101713 www.securityfocus.com
1039793 www.securitytracker.com

Timeline

Published November 15, 2017
Last modified September 16, 2024

The 9 CVEs of ASP.NET Core →

CVE-2018-0787 ASP.NET Core 1.0 Not rated CVE-2018-0808 ASP.NET Core 1.0 Not rated CVE-2018-0784 ASP.NET Core 1.0 Not rated CVE-2018-0785 ASP.NET Core 1.0 Not rated

Track this CVE

CVE-2017-11879 ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a…

Description

Affected products and versions

References

Timeline

Other CVEs of ASP.NET Core