Security Advisory

CVE-2017-11879

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-15 03:00:00

Last updated 2024-09-16 22:14:43

Assigner microsoft

CVSS score not scored

State PUBLISHED

Description

ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".

← Browse all CVEs View on cve.org ↗