CVE-2018-8171
11.07.2018, 00:29
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | asp.net_core | 1.0 |
| microsoft | asp.net_core | 1.1 |
| microsoft | asp.net_core | 2.0 |
| microsoft | asp.net_model_view_controller | 5.2 |
| microsoft | asp.net_webpages | 3.2.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| microsoft | asp.net | 1.0 | CNA |
| microsoft | asp.net | 1.1 | CNA |
| microsoft | asp.net | 2.0 | CNA |
Common Weakness Enumeration
References