Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.
2025-03-11T17:16:29.680
2025-07-02T14:25:46.603
Analyzed
CVSSv3.1: 7.0 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | asp.net_core | < 8.0.14 | Yes |
| Application | microsoft | asp.net_core | < 9.0.3 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.8.19 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.10.12 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.12.6 | Yes |
| Application | microsoft | visual_studio_2022 | < 17.13.3 | Yes |