Not rated
CVE-2018-8171 A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not…
Description
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ASP.NET | Versions not published | |
| ASP.NET Core | 2.0 | No fix stated |
| ASP.NET Core | 1.1 | No fix stated |
| ASP.NET Core | 1.0 | No fix stated |
| ASP.NET MVC 5.2 | Versions not published |
References
- 1041267 www.securitytracker.com
- 104659 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified