CVE-2011-3416
30.12.2011, 01:55
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."Enginsight
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_7 | - |
| microsoft | windows_7 | - |
| microsoft | windows_7 | - |
| microsoft | windows_server_2003 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | windows_vista | * |
| microsoft | windows_vista | - |
| microsoft | windows_xp | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References