CVE-2011-1068

Microsoft Windows Azure Software Development Kit SDK 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support the use of cookies for maintaining state, which allows remote attackers to obtain potentially sensitive information by...

CVE-2011-1068

CVE-2011-1068 affects the Microsoft Windows Azure SDK (1.3.x) prior to 1.3.20121.1237 when using Full IIS and a Web Role with an ASP.NET application. The vulnerability arises from improper support for cookie-based state maintenance, enabling a remote attacker to read an encrypted cookie and poten...