ID de Prueba:	1.3.6.1.4.1.25623.1.0.804038
Categoría:	Windows
Título:	Microsoft ASP.NET Insecure Site Configuration Vulnerability (2905247)
Resumen:	This host is missing an important security update according to Microsoft; advisory (2905247).
Descripción:	Summary: This host is missing an important security update according to Microsoft advisory (2905247). Vulnerability Insight: Flaw is due to the view state that exists when Machine Authentication Code (MAC) validation is disabled through configuration settings. Vulnerability Impact: Successful exploitation will allow remote attackers to use specially crafted HTTP content to inject code to be run in the context of the service account on the ASP.NET server. Affected Software/OS: Microsoft .NET Framework versions 1.1, 2.0, 3.5, 3.5.1, 4.0, 4.5 and 4.5.1. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.