Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Authorization Bypass

🗓️ 14 Feb 2019 06:01:10Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

System.Private.Uri vulnerability authorization bypass domain spoofin

Related
Detection
Refs
ReporterTitlePublishedViews
Family
altlinux
ALT Linux		Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 2.1.9-alt1
13 Mar 201900:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 10 package dotnet-bootstrap-6.0 version 2.1.9-alt1
13 Mar 201900:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 10 package dotnet-bootstrap-7.0 version 2.1.9-alt1
13 Mar 201900:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 2.1.9-alt1
13 Mar 201900:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 8 package dotnet-bootstrap version 2.1.9-alt1
16 May 201900:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 9 package dotnet-bootstrap-5.0 version 2.1.9-alt1
13 Mar 201900:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 10 package dotnet-bootstrap-5.0 version 2.1.9-alt1
13 Mar 201900:00
–altlinux
bdu_fstec
BDU FSTEC		The vulnerability of Microsoft Visual Studio, the PowerShell command interpreter, and the Microsoft .NET Framework and Microsoft .NET Core software products lies in their user interface-related information representation errors, which allows attackers to perform spear-phishing attacks.
13 Mar 201900:00
–bdu_fstec
circl
Circl		CVE-2019-0657
13 Feb 201914:35
–circl
cve
CVE		CVE-2019-0657
6 Mar 201900:00
–cve
Rows per page
Vulners
Node
OR
runtime.win7.system.private.uriruntime.win7.system.private.uriRange4.3.0-preview1–4.3.0csharp
runtime.unix.system.private.uriruntime.unix.system.private.uriRange4.3.0-preview1–4.3.0csharp
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.4_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.5_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.7_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.1_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.2_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.8_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1.10_1.el7
rh-dotnetcore11-dotnetcorerh-dotnetcore11-dotnetcoreMatch1.1_3.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.1_2.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.4_1.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.7_2.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.10_1.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.11_1.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.3_3.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.0_7.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.8_1.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.5_1.el7
rh-dotnetcore10-dotnetcorerh-dotnetcore10-dotnetcoreMatch1.0.13_1.el7
rh-dotnet21rh-dotnet21Match2.1_4.el7
rh-dotnet21rh-dotnet21Match2.1_5.el7
rh-dotnet21rh-dotnet21Match2.1_3.el7
rh-dotnet21rh-dotnet21Match2.1_1.el7
rh-dotnet21rh-dotnet21Match2.1_2.el7
rh-dotnet22rh-dotnet22Match2.2_1.el7
rh-dotnet21-dotnetrh-dotnet21-dotnetMatch2.1.302_1.el7
rh-dotnet21-dotnetrh-dotnet21-dotnetMatch2.1.503_1.el7
rh-dotnet22-dotnetrh-dotnet22-dotnetMatch2.2.103_2.el7
microsoft.netcore.appmicrosoft.netcore.appRange2.1.0-rc1–2.1.7csharp
microsoft.netcore.appmicrosoft.netcore.appRange2.2.0-preview2–2.2.1csharp
system.private.urisystem.private.uriRange4.3.0-preview1–4.3.0csharp

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Oct 2020 00:19Current
7.4High risk
Vulners AI Score7.4
CVSS 24.3
CVSS 35.9
EPSS0.04885
system.private.urivulnerabilityauthorization bypassdomain spoofingurls parsingsecurity restrictionsprivileged actions
27