Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-8171

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This af

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft ASP.NET

  • Web Pages 3.2.3 on Microsoft Visual Studio 2013 Update 5affected
  • Web Pages 3.2.3 on Microsoft Visual Studio 2015 Update 3affected

Microsoft ASP.NET Core

  • 1.0affected
  • 1.1affected
  • 2.0affected

Microsoft ASP.NET MVC 5.2

  • Microsoft Visual Studio 2013 Update 5affected
  • Microsoft Visual Studio 2015 Update 3affected

References