Id:
CVE-2011-3416
Comment
:
The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."
CVSSv2 Score:
8.5
Access vector:
|
NETWORK
|
Access complexity:
|
MEDIUM
|
Authentication:
|
SINGLE
|
Confidentiality impact:
|
COMPLETE
|
Integrity impact:
|
COMPLETE
|
Availability impact:
|
COMPLETE
|
CVSSv2 Vector:
AV:N/AC:M/Au:S/C:C/I:C/A:C
References: