Title

Microsoft ASP.NET MVC Security Bypass Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a security bypass vulnerability in ASP.NET MVC. To exploit this vulnerability, an attacker would entice a user to open a malicious link via email sent or hosted webpage. If successfully exploited, the attacker would execute arbitrary code in the browser of an unsuspecting user in the context of the affected site and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-55467

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.