CVE-2018-8171

State: Published
Severity: Not scored
Published: Jul 11, 2018
Updated: Aug 5, 2024
Reserved: Mar 14, 2018

Description

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
ASP.NETMicrosoft	Web Pages 3.2.3 on Microsoft Visual Studio 2013 Update 5Affected Web Pages 3.2.3 on Microsoft Visual Studio 2015 Update 3Affected
ASP.NET CoreMicrosoft	1.0Affected 1.1Affected 2.0Affected
ASP.NET MVC 5.2Microsoft	Microsoft Visual Studio 2013 Update 5Affected Microsoft Visual Studio 2015 Update 3Affected

References

1041267vdb-entry
104659vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8171

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.