Spoofing Attack Via Authentication Bypass

🗓️ 09 Jul 2018 04:05:19Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 14 Views

Spoofing attack via authentication bypass in System.Net.Htt

Reporter	Title	Published	Views	Family All 9
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect ASP.NET Core in IBM Bluemix	15 Jun 201807:07	–	ibm
CNVD	Microsoft ASP.NET Core Spoofing Vulnerability	23 May 201700:00	–	cnvd
CVE	CVE-2017-0256	12 May 201714:00	–	cve
Cvelist	CVE-2017-0256	12 May 201714:00	–	cvelist
EUVD	EUVD-2018-0627	7 Oct 202500:30	–	euvd
Github Security Blog	Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc	16 Oct 201819:57	–	github
NVD	CVE-2017-0256	12 May 201714:29	–	nvd
OSV	GHSA-J8F4-2W4P-MHJC Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc	16 Oct 201819:57	–	osv
Prion	Design/Logic Flaw	12 May 201714:29	–	prion

Vulners

Node

microsoft system.net.httpMatch4.3.1csharp

OR

microsoft system.net.httpMatch4.1.1csharp

OR

microsoft system.net.http.winhttphandlerMatch4.3.1csharp

OR

microsoft system.net.http.winhttphandlerMatch4.0.1csharp

OR

microsoft system.net.securityMatch4.3.0csharp

OR

microsoft system.net.securityMatch4.0.0csharp

OR

microsoft system.net.websockets.clientMatch4.3.0csharp

OR

microsoft system.net.websockets.clientMatch4.0.0csharp

OR

microsoft microsoft.aspnetcore.mvc.formatters.jsonRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.formatters.xmlRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.dataannotationsRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.apiexplorerRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.abstractionsRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft system.text.encodings.webRange4.0.0-beta-23409–4.0.0csharp

OR

microsoft system.text.encodings.webRange4.3.0-preview1-24530-04–4.3.0csharp

OR

microsoft microsoft.aspnetcore.mvc.razor.hostRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.razorRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.localizationRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.corsRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.taghelpersRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.webapicompatshimRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft microsoft.aspnetcore.mvc.viewfeaturesRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft.aspnetcore.mvc microsoft.aspnetcore.mvcRange1.0.0-rc2-final–1.1.2csharp

OR

microsoft.aspnetcore.mvc.core microsoft.aspnetcore.mvc.coreRange1.0.0-rc2-final–1.1.2csharp

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2017/4021279
github	www.github.com/aspnet/Announcements/issues/239

10 Nov 2021 02:47Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 35.3

EPSS0.04349

spoofing attack authentication bypass system.net.http web requests validation