Title

Microsoft .NET Framework Information Disclosure Vulnerability (MS15-041) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing an Information Disclosure Vulnerability in the Microsoft .NET Framework. The Microsoft .NET Framework is component of the Microsoft Windows operating system that enables building and running software applications and web services. To exploit this vulnerability, an attacker sends a specially crafted web request to an affected server that has custom error messages disabled. If successfully exploited, this vulnerability would allow an attacker to view parts of a web configuration file, which could expose sensite information.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-59893

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.