CVE-2018-8171

Published: Jul 11, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.

Affected (5)

Products: Microsoft: Asp.net Core, Asp.net Model View Controller, Asp.net Webpages

Microsoft

3 products

Asp.net Core

Asp.net Model View Controller

Asp.net Webpages

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Asp.net Core	Version 1.0
Microsoft Asp.net Core	Version 1.1
Microsoft Asp.net Core	Version 2.0
Microsoft Asp.net Model View Controller	Version 5.2
Microsoft Asp.net Webpages	Version 3.2.3