CVE-2011-1068

CVE-2011-1068 affects the Microsoft Windows Azure SDK (1.3.x) prior to 1.3.20121.1237 when using Full IIS and a Web Role with an ASP.NET application. The vulnerability arises from improper support for cookie-based state maintenance, enabling a remote attacker to read an encrypted cookie and poten...