ID de Prueba:	1.3.6.1.4.1.25623.1.0.813674
Categoría:	Windows
Título:	Microsoft ASP.NET Core Security Feature Bypass Vulnerability (Jul 2018)
Resumen:	This host is missing an important security; update according to Microsoft advisory (CVE-2018-8171).
Descripción:	Summary: This host is missing an important security update according to Microsoft advisory (CVE-2018-8171). Vulnerability Insight: The flaw exists because system does not properly validate the number of incorrect login attempts. Vulnerability Impact: Successful exploitation will allow remote attackers to bypass security controls on the target system. Affected Software/OS: Any ASP.NET Core based application that uses 'Microsoft.AspNetCore.Identity' with versions 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5. 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0, 2.1.1. Solution: Upgrade 'Microsoft.AspNetCore.Identity' package versions to 1.0.6 or 1.1.6 or 2.0.4 or 2.1.2 or later. Please see the references for more info. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8171 BugTraq ID: 104659 http://www.securityfocus.com/bid/104659 http://www.securitytracker.com/id/1041267
Copyright	Copyright (C) 2018 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.