Title

Microsoft .NET Framework Information Disclosure Vulnerability (MS16-155) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in .NET Framework. To exploit this vulnerability, an attacker could access the incorrectly encrypted data could attempt to decrypt the data using an easily guessable key. If successfully exploited, this vulnerability could allow an attacker to access information that should be defended by the Always Encrypted feature..

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-72779

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.