Title

Microsoft ASP.NET SignalR Privilege Escalation Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a privilege escalation vulnerability in ASP.NET SignalR. To exploit this vulnerability, an attacker would reflect specially crafted JavaScript back to the user's browser. If successfully exploited, the attacked would gain the ability to modify page content, conduct phishing, or perform actions on behalf of the targeted user and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-42590

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.