ID de Prueba:	1.3.6.1.4.1.25623.1.0.812098
Categoría:	Windows
Título:	Microsoft ASP.NET Core Elevation Of Privilege Vulnerability
Resumen:	This host is missing an important security; update according to Microsoft advisory (CVE-2017-11879).
Descripción:	Summary: This host is missing an important security update according to Microsoft advisory (CVE-2017-11879). Vulnerability Insight: The flaw exists due to an open redirect vulnerability in ASP.NET Core. Vulnerability Impact: Successful exploitation will allow remote attackers to gain elevated privileges on affected system. Affected Software/OS: Microsoft ASP.NET Core 2.0 using packages 'Microsoft.AspNetCore.All' or 'Microsoft.AspNetCore.Mvc.Core' version 2.0.0. Solution: Upgrade Microsoft ASP.NET Core 2.0 to use package 'Microsoft.AspNetCore.All' version 2.0.3 and package 'Microsoft.AspNetCore.Mvc.Core' version 2.0.1 or latest. Please see the references for more info. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11879 BugTraq ID: 101713 http://www.securityfocus.com/bid/101713 http://www.securitytracker.com/id/1039793
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.