Lucene search

K
mscveMicrosoftMS:CVE-2018-8171
HistoryJul 10, 2018 - 7:00 a.m.

ASP.NET Security Feature Bypass Vulnerability

2018-07-1007:00:00
Microsoft
msrc.microsoft.com
32

0.004 Low

EPSS

Percentile

74.2%

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated.

An attacker who successfully exploited this vulnerability could try an infinite number of authentication attempts.

The update addresses the vulnerability by validating the number of incorrect login attempts.