Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3416
HistoryDec 30, 2011 - 1:55 a.m.

CVE-2011-3416

2011-12-3001:55:01
CWE-264
[email protected]
web.nvd.nist.gov
509
asp.net
forms authentication
bypass vulnerability
cve-2011-3416
nvd

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.962 High

EPSS

Percentile

99.5%

JSON

The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka “ASP.Net Forms Authentication Bypass Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_7Match-
OR
microsoftwindows_7Match-sp1x64
OR
microsoftwindows_7Match-sp1x86
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008r2x64
OR
microsoftwindows_server_2008sp2itanium
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2008Matchr2itanium
OR
microsoftwindows_vistasp2
OR
microsoftwindows_vistaMatch-sp2
OR
microsoftwindows_xpsp2professional_x64
OR
microsoftwindows_xpMatchsp3unknownenglish

Related

seebug 1
packetstorm 1
checkpoint_advisories 1
cvelist 2
prion 2
nvd 2
securityvulns 2
mskb 1
cve 1
openvas 2
nessus 1
seebug
seebug
Microsoft .NET Framework 用户验证权限提升漏洞(CVE-2011-3416)
2011-12-30 00:00:00
packetstorm
packetstorm
Microsoft ASP.NET Forms Authentication Bypass
2012-03-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft ASP.NET Authentication Bypass Elevation of Privilege (MS11-100; CVE-2011-3416)
2012-01-03 00:00:00
cvelist
cvelist
CVE-2011-3416
2011-12-30 01:00:00
CVE-2012-1031
2012-02-08 02:00:00
prion
prion
Authentication flaw
2011-12-30 01:55:00
Authentication flaw
2012-02-08 04:11:00
nvd
nvd
CVE-2011-3416
2011-12-30 01:55:01
CVE-2012-1031
2012-02-08 04:11:32
securityvulns
securityvulns
SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416
2012-01-02 00:00:00
Microsoft .Net multiple security vulnerabilities
2012-03-26 00:00:00
mskb
mskb
MS11-100: Vulnerability in the .NET Framework could allow elevation of privilege: December 29, 2011
2011-12-29 00:00:00
cve
cve
CVE-2012-1031
2012-02-08 04:11:32
openvas
openvas
Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)
2011-12-30 00:00:00
Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)
2011-12-30 00:00:00
nessus
nessus
MS11-100: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)
2011-12-29 00:00:00

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.962 High

EPSS

Percentile

99.5%

JSON
Related for CVE-2011-3416
seebug1packetstorm1checkpoint_advisories1cvelist2prion2nvd2securityvulns2mskb1cve1openvas2nessus1