Description

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Remediation

References

CVE-2018-8171

Related Vulnerabilities

WordPress Plugin WP-Members Membership Cross-Site Scripting (3.4.9.2)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-6659)

WordPress Plugin WP-Ban Security Bypass (1.63)

Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities (6.0 - 6.20)

MySQL CVE-2020-2660 Vulnerability (CVE-2020-2660)

Severity

High

Classification

CVE-2018-8171 CWE-287 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities