Description

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Remediation

References

CVE-2018-8171

Related Vulnerabilities

WordPress Plugin CSS & JavaScript Toolbox SQL Injection (9.2)

Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-9233)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-35042)

Oracle Database Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3240)

MySQL CVE-2016-3518 Vulnerability (CVE-2016-3518)

Severity

High

Classification

CVE-2018-8171 CWE-287 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities