Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:26537
HistoryAug 31, 2020 - 5:01 a.m.

Authorization Bypass

2020-08-3105:01:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
36

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

JSON

microsoft.aspnetcore.http and microsoft.owin are vulnerable to authorization bypass. Cookie values are not properly decoded when it contain certain characters. A remote attacker is able to bypass the “Cookie Prefixes” security mechanism by sending malicious cookies to the application.

Related

nessus 7
oraclelinux 1
redhat 2
openvas 4
prion 1
fedora 2
osv 3
github 1
cve 1
redhatcve 1
mscve 1
altlinux 2
kaspersky 1
ibm 1
avleonov 1
nessus
nessus
NewStart CGSL MAIN 6.02 : dotnet3.1 Vulnerability (NS-SA-2021-0078)
2021-03-10 00:00:00
RHEL 7 : .NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux (Important) (RHSA-2020:3697)
2020-09-08 00:00:00
Oracle Linux 8 : .NET / Core / 3.1 (ELSA-2020-3699)
2020-09-11 00:00:00
oraclelinux
oraclelinux
.NET Core 3.1 security and bugfix update
2020-09-11 00:00:00
redhat
redhat
(RHSA-2020:3699) Important: .NET Core 3.1 security and bugfix update
2020-09-08 18:34:54
(RHSA-2020:3697) Important: .NET Core 3.1 security and bugfix update for Red Hat Enterprise Linux
2020-09-08 17:50:48
openvas
openvas
.NET Core SDK Security Feature Bypass Vulnerability (Sep 2020)
2020-09-09 00:00:00
.NET Core Security Feature Bypass Vulnerability (Sep 2020)
2020-09-09 00:00:00
Fedora: Security Advisory for dotnet3.1 (FEDORA-2020-e2deb72e0f)
2020-09-17 00:00:00
prion
prion
Security feature bypass
2020-09-11 17:15:00
fedora
fedora
[SECURITY] Fedora 33 Update: dotnet3.1-3.1.108-1.fc33
2020-10-02 00:36:18
[SECURITY] Fedora 32 Update: dotnet3.1-3.1.108-1.fc32
2020-09-16 14:44:59
osv
osv
BIT-aspnet-core-2020-1045
2024-03-06 10:54:08
Cookie parsing failure
2022-05-24 17:27:57
CVE-2020-1045
2020-09-11 17:15:18
github
github
Cookie parsing failure
2022-05-24 17:27:57
cve
cve
CVE-2020-1045
2020-09-11 17:15:00
redhatcve
redhatcve
CVE-2020-1045
2020-09-07 08:49:20
mscve
mscve
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
2020-09-08 07:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.11-alt1
2021-01-28 00:00:00
Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.11-alt1
2021-01-28 00:00:00
kaspersky
kaspersky
KLA11956 Multiple vulnerabilities in Microsoft Developer Tools
2020-09-08 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation
2022-05-04 18:53:46
avleonov
avleonov
Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange
2020-09-30 23:46:21

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

JSON
Related for VERACODE:26537
nessus7oraclelinux1redhat2openvas4prion1fedora2osv3github1cve1redhatcve1mscve1altlinux2kaspersky1ibm1avleonov1