CVE Database
/

CVE-2011-3416

Back to search

CVE-2011-3416

Published: Dec 30, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The Forms Authentication feature in the ASP.NET subsystem in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username, aka "ASP.Net Forms Authentication Bypass Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

oval:org.mitre.oval:def:14363
vdb-entry
signature
x_refsource_OVAL
TA11-347A
third-party-advisory
x_refsource_CERT
MS11-100
vendor-advisory
x_refsource_MS

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now